The point man for security bug fixes at Microsoft has stepped down as director of the Microsoft Security Response Center (MSRC).

Microsoft's public relations firm confirmed that Andrew Cushman has been replaced by Mike Reavey, formerly a group manager within the MSRC, which coordinates Microsoft's response to emerging security threats and pumps out the monthly security updates for Windows products.

Cushman became director of the MSRC about two years ago, and before that he managed Microsoft's relationship with the security community.

He is well-respected by hackers and over the years has helped bolster Microsoft's reputation with a community that had previously been hostile toward his company. "He's done great things for Microsoft," said Dragos Ruiu, organizer of the CanSecWest hacking contest. "MSRC basically exists because of him."

Cushman is not leaving Microsoft, however. He will stay on as a director in the company's security group. Like Reavey, he reports to George Stathakopoulos, Microsoft's general manager of security engineering and communications.