Now
stuDYING. The capitalisation is a cry for help.
— File · 001 / Portfolio / SG
LAT 1.3521° N · LON 103.8198° E
LAST COMMIT · 17D AGO
STATUS · EDUCATOR / BUILDER / SECURITY
LAST COMMIT · 17D AGO
STATUS · EDUCATOR / BUILDER / SECURITY
CDDC 2025 — RANK 16 SG · PSA CODESPRINT — TOP 15 · APEX HACKATHON — 3RD INTL · 150+ STUDENTS TRAINED · 92% COMPLETION · THRIVEDX · TUTORAE · MICROLOANX · PORTSAGE · GXS → GXB REGIONAL · FLEETNETICS · SMRT · CDDC 2025 — RANK 16 SG · PSA CODESPRINT — TOP 15 · APEX HACKATHON — 3RD INTL · 150+ STUDENTS TRAINED · 92% COMPLETION · THRIVEDX · TUTORAE · MICROLOANX · PORTSAGE · GXS → GXB REGIONAL · FLEETNETICS · SMRT
Status
What I am doing right now.
GitHub, live-ish
Singapore time
Next
I wonder what is next too.
Public commits
github.com/cheongcode · 21 repos
- PUSHcheongcodeUpdate README with new descriptions and images17D AGO
- PUSHcheongcodenew readme17D AGO
- CREATEpallife_palworld_modbranch main21D AGO
- CREATEplayerhome_palworld_modbranch main21D AGO
- PUSHdailyreward_palworld_modUpdate credits section in README.md21D AGO
- CREATEdailyreward_palworld_modbranch main21D AGO
Listening
good vibes only. The unofficial soundtrack to a red CI badge.
Building
TutorAE — scheduling, invoicing and AI-assisted admin for tutors.
Chapter 01 — Origin
Two disciplines, one identity crisis.
2018 → Present
SINGAPORE
The best way to defend a system is to have built one — the fastest way to teach it is to have broken one first.
// I build software, secure systems, and teach people how both work. The résumé looks like someone kept accepting side quests — startups, education, banking, cybersecurity, AI, community. Somehow it all makes sense.
150+
STUDENTS
across DART, ThriveDX,
TigerCampus, N0H4TS
92%
COMPLETION
ThriveDX 24-week
18
ROLES SHIPPED
2018 → current
6
CERTS
TIER-1 · OSCP
OSWP · CHFI · PSPO II
Chapter 02 — About
Jack of all trades, trying to master some.
I'm really good at debugging. Mostly because I'm usually the one who introduced the bug in the first place.
Currently doing my Master's. My portfolio drifted into teaching, software engineering, cybersecurity, startups, AI, consulting and photography.
At this point it looks less like a career path and more like someone merged six Git branches directly into production.
I build software, break into systems, and explain how both work to students who somehow retain more than I do.
Looking for full-time opportunities because FOMO is expensive.
Stack
Tools I actually use.
Build
Next.jsTypeScriptNode.jsPythonGoPostgreSQLTailwind CSS
Break
Burp SuiteMetasploitNmapWiresharkCobalt StrikeBloodHound
Ship
DockerAWSVercelGitHub ActionsLinuxNeovimtmux
Teach
CTFdJupyterNotionOBSZoomA lot of patience
Testimonials
Things other people actually said.
“Brandon has a rare mix: he can build the thing, break the thing, and then explain the thing without making you feel stupid.”
“He debugs like someone who has caused the exact same bug before. Because he probably has.”
Certified. Ranked.
06 CERTS
03 WINS
OSCP+
DEC 2025 · OFFSEC
OffSec Certified Professional+
OSCP
DEC 2025 · OFFSEC
Offensive Security Certified Professional
OSWP
DEC 2025 · OFFSEC
Offensive Security Wireless Professional
CHFI
2023 · EC-COUNCIL
Computer Hacking Forensic Investigator
Three finals, three flags — team PACKCAT.
Top 15
PSA CodeSprint 2025 — PORTSAGE / AI maritime ops
300+ teams
OCT 2025
3rd · Intl
EasyA × Ripple Apex — MicroLoanX / decentralised microloans
JUN 2025
Rank 16
BrainHack CDDC CTF 2025 — PACKCAT / DSTA finalist, University Category
2025
Flagship operations.
03 SELECTED
02 ARCHIVED
/ 01
2025 · SHIPPED
PORTSAGE
AI Maritime Operations
Detect operational anomalies in maritime cargo handling using AI-assisted signals.
Role — ML Engineer / Full-Stack Builder
System — Python · FastAPI · React · Time-series models · Containerised inference
Outcome — Top 15 finalist among 300+ teams at PSA CodeSprint 2025.
/ 02
2026 · ACTIVE
TutorAE
Tutor Operations System
Replace WhatsApp, Google Calendar, Excel and false confidence with one coherent system for tutors.
Role — Founder / Solo Builder
System — Next.js · TypeScript · PostgreSQL · Payments · AI-assisted workflows
Outcome — Friends started paying. Technically a SaaS.
/ 03
2025 · SHIPPED
MicroLoanX
Decentralised Lending
Enable microloans on the XRP Ledger for underserved borrowers.
Role — Full-Stack / Smart Contract Builder
System — Ripple · XRP Ledger · React · Node.js
Outcome — 3rd place international at EasyA × Ripple Apex hackathon.
Interlude
Career index.
Most recent roles by default.
/01
Sep 2026 → Present
Singapore · On-site
Singapore · On-site
Income Insurance Limited
Offensive Engineering Analyst
Drive continuous Breach and Attack Simulation (BAS) and adversary-informed testing mapped to MITRE ATT&CK. Translate findings into actionable remediation for Security Operations, strengthen cyber resilience through continuous assurance, and support security testing, hardening reviews, technical risk assessments, and process improvement.
/02
Feb 2026 → Aug 2026
Singapore · Remote
Singapore · Remote
Stealth
Founder
Building an all-in-one platform for tutors and tuition centres to manage students, scheduling, invoicing, payments, and AI-assisted administrative workflows. Current traction is friends paying $10/month, which covers the API bill and 0.4 of a breakfast. Available for consulting and side builds, especially if the problem can be solved by an agentic AI-native end-to-end vertically integrated solution.
/03
Dec 2025 → Aug 2026
Singapore · Remote
Singapore · Remote
TechDX | Global Tech Education
Senior Cybersecurity Instructor
Part of a global cybersecurity education team operating across 60+ countries. Lead curriculum delivery for aspiring cyber professionals, drive AI integration into security education, and mentor learners from diverse backgrounds through hands-on content aligned with NIST and ISO/IEC 42001.
/04
Nov 2024 → Aug 2026
Singapore · On-site
Singapore · On-site
DART
Cyber Security Instructor
Deliver cybersecurity instruction across network forensics, intrusion detection, applied cryptography, web exploitation, secure backend development, and CTF readiness. Modules include Wireshark, Python scripting, secure coding, OWASP-aligned practices, and guided red-team workflows.
Appendix
Supporting evidence.
Education
Singapore Management University
Master of IT in Business — Information Technology · Jul 2026 → Dec 2027
University of Wollongong
Bachelor of Computer Science — AI/Big Data & Cyber Security · Jun 2024 → Dec 2025
Nanyang Polytechnic
Diploma in Infocomm and Security · Apr 2019 → Apr 2022
Chapter 05 — Writing
Notes from the desk, not the pedestal.
Aug 30, 2026
Building
The terminal is not a shell.
Why this site has a command bar that cannot `rm -rf` anything, and why that is the whole point.
terminaldesignnextjssecurity
Aug 28, 2026
Building
A portfolio is an instrument, not a trophy.
Why I rebuilt this site until it felt like a desk I actually wanted to work at — and why “good enough” is never the brief.
designnextjscareermeta
Jul 14, 2026
Teaching
Teaching offensive security without giving HR a heart attack.
How to make breaking things feel like a legitimate career path to students who still think hackers wear hoodies in summer.
securityeducationoscpstorytelling