Leadership
Leadership and practices.
Sidechain delivers every engagement with its own employees. This page covers who leads the work and how the practices are organized.
Leadership
Leadership.
The people accountable for direction, delivery, and testing.
Andrew Lance
Founder & CEO
Andrew sets Sidechain’s direction and leads the managed security practice and the Timberline product. He has led encryption and key management programs for Fortune 500 companies.
Dwain Engel
Director of Engineering
Dwain leads engineering across managed security, infrastructure, and encryption platforms. His team is accountable for the technical delivery of every client program and for the private infrastructure that hosts client security systems.
Alex Hernandez
Senior Security Engineer
Alex leads the offensive security practice: penetration testing and AI red teaming, from scoping through the live technical debrief. He also leads vulnerability management and incident coordination for managed clients.
Practices
How the work is organized.
Six practices, each with its own scope, platforms, and standards. Most clients work with two or three of them.
Managed security operations
24/7 monitoring, endpoint and email protection, vulnerability and patch management, and backup and recovery for managed clients.
Managed securityData security engineering
Encryption, key management, hardware security modules, and tokenization on Thales CipherTrust and Luna, Entrust, and cloud key management. Every engineer in this practice is Thales-certified.
Data securityOffensive security
Penetration testing and AI red teaming, scoped, performed, and debriefed by Sidechain employees. Findings are discussed directly with the engineers who found them.
Penetration testingInfrastructure & private cloud
Server, network, and device management, private cloud hosting, and fixed-scope migration and data center projects.
IT managementCompliance & assessments
HIPAA risk analysis and programs mapped to PCI-DSS, NY-DFS Part 500, SOC 2, and NIST CSF, documented the way the auditor will read them.
Risk assessmentsTimberline
A healthcare AI workspace built and operated by Sidechain’s security engineers in a customer-isolated environment.
About TimberlineEngineers you can name.
Every client has a named engineer who knows the environment, its history, and the people who run it, and a maximum four-hour response commitment. The person you talk to first is someone who will work on your program.
Every engagement is scoped, performed, and debriefed by Sidechain employees. Testing and assessments are never subcontracted.
- Named engineer for every client
- Maximum four-hour response commitment
- Thales-certified data security engineers
- In-house penetration testing and AI red teaming
Sidechain’s team are great communicators, they know their products, and they’re knowledgeable. They’re also just nice people, the kind of people you want to work with.
What set Sidechain apart was the debrief. They didn’t just hand us a PDF. They walked our engineering team through every finding and helped us understand the real-world impact.
Sidechain’s pen test uncovered three critical vulnerabilities our previous vendor missed entirely. The remediation plan was clear, prioritized, and our team had everything fixed within two weeks.
Your first call is with an engineer.
The person you talk to first is someone who will work on your program.
(503) 389-3174 · info@sidechainsecurity.com · Portland, Oregon