portfolio›about.md›#
<!-- about.md · last edited by brandon -->
#Brandon Wess Porter
## Security Engineer · Koszalin, Poland
> I break systems on purpose so attackers can't do it by accident.
I'm a security engineer with 8+ years of experience hardening cloud platforms, securing CI/CD pipelines and building detection that actually fires when it matters. I sit between engineering and security — writing code, reviewing threat models, and turning findings into guardrails developers barely notice.
My focus is **application security**, **cloud infrastructure hardening** and **detection engineering**. I believe the best control is the one that's automated, measurable and explained well enough that nobody wants to bypass it.
## Core skills
- Offensive penetration testing · web & API exploitation · red-team ops
- AppSec threat modeling (STRIDE) · SAST/DAST · secure code review
- Cloud AWS · GCP · Kubernetes · IAM least-privilege · OPA/Rego
- Detection SIEM pipelines · Sigma rules · EDR tuning · incident response
- Automation Go · Python · Rust · Bash · Terraform · GitHub Actions
- Compliance ISO 27001 · SOC 2 · PCI DSS · OWASP ASVS
## Certifications
1. OSCP — Offensive Security Certified Professional
2. CISSP — (ISC)² Certified Information Systems Security Professional
3. AWS Certified Security — Specialty
4. CKS — Certified Kubernetes Security Specialist
## Currently
- [x] Leading product security at a payments platform
- [x] Maintaining open-source secret scanning tooling
<!-- EOF -->
{
"$schema": "./portfolio.schema.json",
"owner": "Brandon Wess Porter",
"projects": [
{
"name": "sentinel-lens",
"summary": "Continuous cloud posture scanner for AWS & GCP. Flags public buckets, over-privileged IAM roles and drifted security groups, then opens auto-remediation PRs against Terraform.",
"stack": ["Go", "OPA/Rego", "Terraform", "GitHub Actions"],
"impact": "Cut critical misconfigurations by 87% across 140+ accounts",
"openSource": false
},
{
"name": "honeymesh",
"summary": "Distributed honeypot network of lightweight decoy services (SSH, RDP, fake admin panels) that streams attacker telemetry into the SIEM and enriches it with threat-intel feeds.",
"stack": ["Python", "Docker", "Kafka", "Elastic", "MITRE ATT&CK"],
"impact": "Detected 3 credential-stuffing campaigns before they hit production",
"openSource": true
},
{
"name": "keyward",
"summary": "High-speed secret scanner for git history, pre-commit hooks and CI. Entropy + provider-specific detectors with automatic key revocation via provider APIs.",
"stack": ["Rust", "WebAssembly", "pre-commit"],
"impact": "Scans 1M commits in under 90 seconds; ~2.1k GitHub stars",
"openSource": true
},
{
"name": "threatmodel-as-code",
"summary": "Describe a system's data flows in YAML and get STRIDE threats, data-flow diagrams and a prioritized mitigation backlog generated on every pull request.",
"stack": ["TypeScript", "Graphviz", "Jira API"],
"impact": "Adopted by 30+ product teams; design reviews down from 2 weeks to 2 days",
"openSource": false
}
],
"totalVulnsDisclosed": 46,
"cves": 7
}
import type { Role } from "./types";
/**
* Professional history — Brandon Wess Porter
* Sorted newest first. All findings responsibly disclosed.
*/
export const experience: Role[] = [
{
company: "Northgate Payments",
title: "Senior Security Engineer",
period: [2022, "present"],
highlights: [
"Lead product security for a PCI DSS Level 1 card-processing platform",
"Built a paved-road CI pipeline with SAST, SCA and container signing (Sigstore)",
"Reduced mean time to remediate criticals from 21 days to 4",
"Run quarterly purple-team exercises with the SOC",
],
},
{
company: "Baltic Cloud Systems",
title: "Security Engineer",
period: [2019, 2022],
highlights: [
"Hardened multi-tenant Kubernetes clusters (PSA, network policies, Falco)",
"Designed IAM least-privilege model across 140+ AWS accounts",
"Wrote 200+ Sigma detection rules mapped to MITRE ATT&CK",
"Key contributor to ISO 27001 certification",
],
},
{
company: "Helix Data Labs",
title: "Penetration Tester",
period: [2017, 2019],
highlights: [
"Delivered 60+ web, API and internal network assessments for fintech clients",
"Discovered and disclosed 7 CVEs in widely used open-source libraries",
"Authored the internal OWASP-based testing methodology",
],
},
];
export const education = {
degree: "B.Sc. Computer Science — Network Security",
years: [2013, 2017],
} as const;
export const yearsInSecurity = () => new Date().getFullYear() - 2017; // 9
#!/usr/bin/env bash
# contact.sh — get in touch with Brandon
set -euo pipefail
FIRST_NAME="Brandon Wess"
SURNAME="Porter"
ROLE="Security Engineer"
ADDRESS=(
"Pulaskiego 4"
"75701 Koszalin"
"Poland"
)
PHONE="+1 (910) 247-0919"
reach_out() {
echo "Hi Brandon, let's talk security." | mail -s "Hello" "$EMAIL"
}
reach_out && echo "✓ message queued"
ProblemsOutputTerminal
brandon@portfolio ~/portfolio $ ./contact.sh --print
- name
- Brandon Wess
- surname
- Porter
- address
- Pulaskiego 4, 75701 Koszalin, Poland
- phone
- +1 (910) 247-0919
- najibocheltreevuhaza34@gmail.com
brandon@portfolio ~/portfolio $