About me
Andrew Cook is the Chief Technology Officer at Recon InfoSec, where he leads the technical vision, strategy, and execution of the company’s managed security operations. With over a decade of hands-on experience in threat hunting, digital forensics, and incident response, Andrew has dedicated his career to finding and stopping cyber threats. Prior to joining Recon InfoSec, he led incident response practices at Praetorian and Delta Risk. His approach to cybersecurity is shaped by his service as a Cyberspace Operations Officer in the Air Force—where he helped develop the nation’s new approach to defensive security operations—and by his time as an Air National Guardsman, responding to emergencies from hurricanes to statewide ransomware events.
In addition to his role at Recon InfoSec, Andrew actively contributes to the cybersecurity community through open source projects, community forums, and as the host of “Thursday Defensive.” He remains passionate about sharing knowledge, fostering collaboration, and delivering practical solutions that help organizations protect themselves against ever-evolving threats.
