Cyber Magazine September 2022 | Page 121

2U

“ From an infrastructure perspective , 2U is actually in a really good state because we have a lot of infrastructure as code deployment builds , so have many security guardrails built into those CI / CD pipelines ”

ANDRES ANDREU CHIEF INFORMATION SECURITY OFFICER , 2U
“ On my own , I started doing a lot of pen testing ( penetration testing or ethical hacking ) and built my own business , and this was before the big players were involved in pen testing . I also wrote a book on pen testing in 2006 and that started my public speaking path . After that , I began consulting for a number of governments around the world and ended up with an interesting contract at the United Nations , oriented around the technology side of human trafficking and counter terrorism work .”
From this , Andreu co-invented three cybersecurity products as employee number three of Bayshore Networks . “ We started in 2012 and built the company and the products up to exit in Jan of 2021 ,” he says , “ where an Israeli company bought out all the intellectual property and the engineering team .”
Andreu was then asked to join 2U to spearhead their security programme . Learning and security have clearly always been a motif throughout his impressive career .
As an EdTech company , 2U is presently at an interesting migration point , where they ’ re making a very hard push to move from a product company to a platform company – and there ' s a sizeable difference between the two . “ From a tech-perspective , we feel that an effective platform is the future of the company . That shift will really streamline and facilitate our partners ' ability to engage with us .”
Layer Seven – Securing the data , not the network Since 2U ’ s customer-facing solutions were born in the cloud , Andreu sees cloud and application security as “ very tightly coupled ”.
“ This is really the protection of our users , their data , their experience - from what ' s known as a ' layer seven ' perspective . A lot
cybermagazine . com 121