Chief Operating Officer
Andres Echeverry
Andres has nearly 20 years of experience leading information technology and medical device teams. He has launched more than a dozen products and built organizations ranging from startups to large enterprises while collaborating with global experts in strategy, innovation management, and organizational design.
Before joining CyberMed, Andres served as VP of the Information Systems division for a growth-stage defense technology firm, where he led a data science and analytics services portfolio.
He earned a Bachelor's degree in Materials Science from the University of Florida with a 4.0 GPA and a Master's degree in Economics and Management from Harvard University.
Credentials
- MS, Economics and Management, Harvard University
- BS, Materials Science, University of Florida (4.0 GPA)
- Former VP, Information Systems, defense technology growth-stage firm
Areas of expertise
- Medical device program management
- Cybersecurity operations
- MedTech product launch
- Information systems leadership
Articles by Andres Echeverry
- Medical Device Security Testing Guide: What to Test, When to Test It, and What FDA Expects
A practical medical device security testing guide: architecture review, code review, fuzzing, penetration testing, and the FDA-ready evidence each produces.
April 15, 2026
- What the Stryker Attack Actually Means for Medical Device Companies
The Stryker wiper attack exposed the gap between FDA compliance and operational resilience. Here is what medical device companies should actually do about it.
March 25, 2026
- SBOM Generation for Medical Device Software: Practical Setup by Stack
Practical SBOM generation for medical device software across common stacks, with validation, quality gates, and SOUP handling for FDA submission.
March 4, 2026
- Medical Device Risk Assessment using CVSS
How to use CVSS in medical device risk assessment: FDA's CVSS v3.0 reference, the MITRE rubric, exploitability scoring, and where the score fits in your file.
April 26, 2025
- How to Conduct Medical Device Penetration Testing
How to conduct medical device penetration testing that FDA can review: scope from the threat model, tester independence, device-specific phases, reporting.
February 19, 2025
- How to Implement Secure Software Development Lifecycle (SDLC) for Medical Devices
Secure SDLC for medical devices: which security activity belongs in each stage, the FDA artifact it produces, and common submission failures.
February 19, 2025
- How to Perform security code review
How to perform a security code review for medical device software: inputs, tools plus manual review, what to look for in device code, and FDA evidence.
February 18, 2025