B.C. — 001 / 2026SG · GMT+8
CH · 00 / HEROSCROLL ↓
◉ Brandon Cheong
— File · 001 / Portfolio / SG
LAT 1.3521° N · LON 103.8198° E
LAST COMMIT · 6D AGO
STATUS · EDUCATOR / BUILDER / SECURITY

Brandon
 
Cheong

Currently:
Offensive Security Engineer

OSCP · OSWP · CHFI
PSPO II
SMU · UOW · NYP

CDDC 2025 — RANK 16 SG · PSA CODESPRINT — TOP 15 · APEX HACKATHON — 3RD INTL · 150+ STUDENTS TRAINED · 92% COMPLETION · THRIVEDX · TUTORAE · MICROLOANX · PORTSAGE · GXS → GXB REGIONAL · FLEETNETICS · SMRT · CDDC 2025 — RANK 16 SG · PSA CODESPRINT — TOP 15 · APEX HACKATHON — 3RD INTL · 150+ STUDENTS TRAINED · 92% COMPLETION · THRIVEDX · TUTORAE · MICROLOANX · PORTSAGE · GXS → GXB REGIONAL · FLEETNETICS · SMRT

Status

What I am doing right now.

GitHub, live-ish
Singapore time

Now

stuDYING. The capitalisation is a cry for help.

Next

I wonder what is next too.

Building

TutorAE for tutors who are done with spreadsheets. WireHunt, the Rust pcap engine that used to be a Python school project.

Chapter 01 — Origin

Two disciplines, one identity crisis.

2018 → Present
SINGAPORE

The best way to defend a system is to have built one — the fastest way to teach it is to have broken one first.

// I build software, secure systems, and teach people how both work. The résumé looks like someone kept accepting side quests — startups, education, banking, cybersecurity, AI, community. Somehow it all makes sense.

150+

STUDENTS
across DART, ThriveDX,
TigerCampus, N0H4TS

92%

COMPLETION
ThriveDX 24-week

18

ROLES SHIPPED
2018 → current

6

CERTS
TIER-1 · OSCP
OSWP · CHFI · PSPO II

Chapter 02 — About

Jack of all trades, trying to master some.

Brandon Cheong

I'm really good at debugging. Mostly because I'm usually the one who introduced the bug in the first place.

Currently doing my Master's. My portfolio drifted into teaching, software engineering, cybersecurity, startups, AI, consulting and photography.

At this point it looks less like a career path and more like someone merged six Git branches directly into production.

I build software, break into systems, and explain how both work to students who somehow retain more than I do.

Looking for full-time opportunities because FOMO is expensive.

Stack

Tools I actually use.

Build

RustNext.jsTypeScriptNode.jsPythonGoPostgreSQLTailwind CSS

Break

Burp SuiteMetasploitNmapWiresharkCobalt StrikeBloodHound

Ship

DockerAWSVercelGitHub ActionsLinuxNeovimtmux

Teach

CTFdJupyterNotionOBSZoomA lot of patience

Testimonials

Things other people actually said.

“Brandon has a rare mix: he can build the thing, break the thing, and then explain the thing without making you feel stupid.”

Former student

ThriveDX bootcamp · Anonymous course feedback

“He debugs like someone who has caused the exact same bug before. Because he probably has.”

Colleague

GXS Bank · Internal team retro

Certified. Ranked.

06 CERTS
03 WINS

OSCP+

DEC 2025 · OFFSEC

OffSec Certified Professional+

OSCP

DEC 2025 · OFFSEC

Offensive Security Certified Professional

OSWP

DEC 2025 · OFFSEC

Offensive Security Wireless Professional

CHFI

2023 · EC-COUNCIL

Computer Hacking Forensic Investigator

Three finals, three flags — team PACKCAT.
Top 15

PSA CodeSprint 2025 — PORTSAGE / AI maritime ops

300+ teams
OCT 2025

3rd · Intl

EasyA × Ripple Apex — MicroLoanX / decentralised microloans


JUN 2025

Rank 16

BrainHack CDDC CTF 2025 — PACKCAT / DSTA finalist, University Category


2025

Flagship operations.

04 SELECTED
02 ARCHIVED

Swipe dossiers

PORTSAGE
/ 01

2025 · SHIPPED

PORTSAGE

AI Maritime Operations

Detect operational anomalies in maritime cargo handling using AI-assisted signals.

Role — ML Engineer / Full-Stack Builder

System — Python · FastAPI · React · Time-series models · Containerised inference

Outcome — Top 15 finalist among 300+ teams at PSA CodeSprint 2025.

TutorAE
/ 02

2026 · ACTIVE

TutorAE

Tutor Operations System

Replace WhatsApp, Google Calendar, Excel and false confidence with one coherent system for tutors.

Role — Founder / Solo Builder

System — Next.js · TypeScript · PostgreSQL · Payments · AI-assisted workflows

Outcome — Friends started paying. Technically a SaaS.

MicroLoanX
/ 03

2025 · SHIPPED

MicroLoanX

Decentralised Lending

Enable microloans on the XRP Ledger for underserved borrowers.

Role — Full-Stack / Smart Contract Builder

System — Ripple · XRP Ledger · React · Node.js

Outcome — 3rd place international at EasyA × Ripple Apex hackathon.

/ 04

2020 → 2026 · SHIPPED

WireHunt

Network forensic engine

Drop a pcap. Get the streams, the flags, the credentials, and a report.

Role — Builder, from scratch

System — Rust · pcap/pcapng · TCP reassembly · CLI / TUI / Web

Outcome — Ten protocol dissectors, three interfaces, and none of the original Python left in the tree.

Interlude

Career index.

Most recent roles by default.

/01
Sep 2026 → Present
Singapore · On-site

Offensive Security Engineer

Income Insurance Limited

Drive continuous Breach and Attack Simulation (BAS) and adversary-informed testing mapped to MITRE ATT&CK. Translate findings into actionable remediation for Security Operations, strengthen cyber resilience through continuous assurance, and support security testing, hardening reviews, technical risk assessments, and process improvement.

/02
Feb 2026 → Aug 2026
Singapore · Remote

Founder

Stealth

Building an all-in-one platform for tutors and tuition centres to manage students, scheduling, invoicing, payments, and AI-assisted administrative workflows. Current traction is friends paying $10/month, which covers the API bill and 0.4 of a breakfast. Available for consulting and side builds, especially if the problem can be solved by an agentic AI-native end-to-end vertically integrated solution.

Dossier →
/03
Dec 2025 → Aug 2026
Singapore · Remote

Senior Cybersecurity Instructor

TechDX | Global Tech Education

Part of a global cybersecurity education team operating across 60+ countries. Lead curriculum delivery for aspiring cyber professionals, drive AI integration into security education, and mentor learners from diverse backgrounds through hands-on content aligned with NIST and ISO/IEC 42001.

/04
Nov 2024 → Aug 2026
Singapore · On-site

Cyber Security Instructor

DART

Deliver cybersecurity instruction across network forensics, intrusion detection, applied cryptography, web exploitation, secure backend development, and CTF readiness. Modules include Wireshark, Python scripting, secure coding, OWASP-aligned practices, and guided red-team workflows.

Appendix

Supporting evidence.

Education

Master of IT in Business — Information Technology

Singapore Management University · Jul 2026 → Dec 2027

Bachelor of Computer Science — AI/Big Data & Cyber Security

University of Wollongong · Jun 2024 → Dec 2025

Diploma in Infocomm and Security

Nanyang Polytechnic · Apr 2019 → Apr 2022

Build log

What this site does, in the order it learned to. The dates are the commits. The same list is the terminal command log.

  1. 31 Oct 2026

    Countdown

    The terminal can keep time. timer 5 min, or timer till 12:30am, raises the screensaver and the digits roll the way the name at the top does. Tap or esc hides the screen. The count keeps going. Ghost cursors sit above the vignette, so the dark edges do not swallow them.

  2. 31 Oct 2026

    Seams

    Put two windows of this page side by side and the shared edge opens. Particles cross it, and a codename is cut in half by the gap. On a phone, press and hold the edge of the screen. If someone else holds an edge too, the particles meet. That meeting is not a line in the sky.

  3. 31 Oct 2026

    Villain mode

    When Brandon is on this site, his cursor is the villain from the name at the top: a diamond with an eye, labelled BOSS INCOMING, with no city. Nearby ghosts are drawn in toward him, and the old echoes collapse into his cursor when he arrives. The page says he is in the building. Hold still on that cursor and you have met the villain. The meeting is a diamond on /sky, and this browser remembers it. He gets in through a private link. There is no login, and catching him does not open a chat.

  4. 30 Oct 2026

    Ghosts

    Other people on the front page show up as cursors. Each one is a codename and a city, and nothing else: no account, no cookie. Move onto another ghost and hold still. The two of you converge, and /sky draws a line between the cities you came from. Places people linger pick up footprints. Double-click empty space, or press and hold, to wave. The edges of the page lighten as the room approaches 100 convergences, which opens Arc 002.

  5. 26 Oct 2026

    WireHunt, the flag, the room

    WireHunt landed in the dossier. The writing got its own chapter. The terminal grew a hidden flag, a fake packet-capture demo, and a few commands that refuse to take themselves seriously. Grain, the scanline, and the name that settles out of noise are the room all of this sits in.

  6. 07 Jul 2026

    Arc 001

    The portfolio became a file. Chapters, a résumé you can search, a terminal that only runs the commands written for it, and a card that asks why you are here before any of that. The portrait, the scroll progress, and the résumé download arrived the same week.

Chapter 05 — Writing

Notes from the desk, not the pedestal.

All writing →