Now
stuDYING. The capitalisation is a cry for help.
Interlude
Pick the closest reason. I promise the website will pretend this was planned.
Trying to figure out where I fit? Same. But if you need someone who can build software, understand security, explain technical risk, teach humans, and survive ambiguous job scopes, we should probably talk.
View Résumé →I have founded things, shipped things, killed things, and watched enough startup decks to know when the TAM slide is doing emotional labour. Bring the idea. I’ll bring the uncomfortable questions.
Pitch Me →Software, automation, AI tooling, dashboards, internal systems, prototypes, tutoring platforms, risk tools, and weird problems that do not fit neatly into a job description. Send the mess.
Start a Build →I teach programming, cybersecurity, AI, web development, networking, CTF, OSCP-style prep, and the parts of tech your school made unnecessarily confusing. Students, parents, adult learners, and career switchers welcome.
Book a Lesson →Cybersecurity, AI, software, startups, teaching, career chaos, side projects, or why every tutor is secretly running a logistics company. Happy to talk.
Book a Chat →Bold. Suspicious. Potentially interesting. If the idea is strong, the problem is real, and the execution plan is not "we just need an app," I might listen.
Convince Me →Status
GitHub, live-ish
Singapore time
Now
stuDYING. The capitalisation is a cry for help.
Next
I wonder what is next too.
Public commits
github.com/cheongcode · 23 repos
Listening
good vibes only. The unofficial soundtrack to a red CI badge.
Building
TutorAE for tutors who are done with spreadsheets. WireHunt, the Rust pcap engine that used to be a Python school project.
Chapter 01 — Origin
2018 → Present
SINGAPORE
The best way to defend a system is to have built one — the fastest way to teach it is to have broken one first.
// I build software, secure systems, and teach people how both work. The résumé looks like someone kept accepting side quests — startups, education, banking, cybersecurity, AI, community. Somehow it all makes sense.
STUDENTS
across DART, ThriveDX,
TigerCampus, N0H4TS
COMPLETION
ThriveDX 24-week
ROLES SHIPPED
2018 → current
CERTS
TIER-1 · OSCP
OSWP · CHFI · PSPO II
Chapter 02 — About

I'm really good at debugging. Mostly because I'm usually the one who introduced the bug in the first place.
Currently doing my Master's. My portfolio drifted into teaching, software engineering, cybersecurity, startups, AI, consulting and photography.
At this point it looks less like a career path and more like someone merged six Git branches directly into production.
I build software, break into systems, and explain how both work to students who somehow retain more than I do.
Looking for full-time opportunities because FOMO is expensive.
Stack
Build
Break
Ship
Teach
Testimonials
“Brandon has a rare mix: he can build the thing, break the thing, and then explain the thing without making you feel stupid.”
“He debugs like someone who has caused the exact same bug before. Because he probably has.”
06 CERTS
03 WINS
DEC 2025 · OFFSEC
OffSec Certified Professional+
DEC 2025 · OFFSEC
Offensive Security Certified Professional
DEC 2025 · OFFSEC
Offensive Security Wireless Professional
2023 · EC-COUNCIL
Computer Hacking Forensic Investigator
Three finals, three flags — team PACKCAT.
PSA CodeSprint 2025 — PORTSAGE / AI maritime ops
300+ teams
OCT 2025
EasyA × Ripple Apex — MicroLoanX / decentralised microloans
JUN 2025
BrainHack CDDC CTF 2025 — PACKCAT / DSTA finalist, University Category
2025
04 SELECTED
02 ARCHIVED
Swipe dossiers
Interlude
Most recent roles by default.
Income Insurance Limited
Drive continuous Breach and Attack Simulation (BAS) and adversary-informed testing mapped to MITRE ATT&CK. Translate findings into actionable remediation for Security Operations, strengthen cyber resilience through continuous assurance, and support security testing, hardening reviews, technical risk assessments, and process improvement.
Stealth
Building an all-in-one platform for tutors and tuition centres to manage students, scheduling, invoicing, payments, and AI-assisted administrative workflows. Current traction is friends paying $10/month, which covers the API bill and 0.4 of a breakfast. Available for consulting and side builds, especially if the problem can be solved by an agentic AI-native end-to-end vertically integrated solution.
Dossier →TechDX | Global Tech Education
Part of a global cybersecurity education team operating across 60+ countries. Lead curriculum delivery for aspiring cyber professionals, drive AI integration into security education, and mentor learners from diverse backgrounds through hands-on content aligned with NIST and ISO/IEC 42001.
DART
Deliver cybersecurity instruction across network forensics, intrusion detection, applied cryptography, web exploitation, secure backend development, and CTF readiness. Modules include Wireshark, Python scripting, secure coding, OWASP-aligned practices, and guided red-team workflows.
Appendix
Education
Singapore Management University · Jul 2026 → Dec 2027
University of Wollongong · Jun 2024 → Dec 2025
Nanyang Polytechnic · Apr 2019 → Apr 2022
Build log
What this site does, in the order it learned to. The dates are the commits. The same list is the terminal command log.
31 Oct 2026
The terminal can keep time. timer 5 min, or timer till 12:30am, raises the screensaver and the digits roll the way the name at the top does. Tap or esc hides the screen. The count keeps going. Ghost cursors sit above the vignette, so the dark edges do not swallow them.
31 Oct 2026
Put two windows of this page side by side and the shared edge opens. Particles cross it, and a codename is cut in half by the gap. On a phone, press and hold the edge of the screen. If someone else holds an edge too, the particles meet. That meeting is not a line in the sky.
31 Oct 2026
When Brandon is on this site, his cursor is the villain from the name at the top: a diamond with an eye, labelled BOSS INCOMING, with no city. Nearby ghosts are drawn in toward him, and the old echoes collapse into his cursor when he arrives. The page says he is in the building. Hold still on that cursor and you have met the villain. The meeting is a diamond on /sky, and this browser remembers it. He gets in through a private link. There is no login, and catching him does not open a chat.
30 Oct 2026
Other people on the front page show up as cursors. Each one is a codename and a city, and nothing else: no account, no cookie. Move onto another ghost and hold still. The two of you converge, and /sky draws a line between the cities you came from. Places people linger pick up footprints. Double-click empty space, or press and hold, to wave. The edges of the page lighten as the room approaches 100 convergences, which opens Arc 002.
26 Oct 2026
WireHunt landed in the dossier. The writing got its own chapter. The terminal grew a hidden flag, a fake packet-capture demo, and a few commands that refuse to take themselves seriously. Grain, the scanline, and the name that settles out of noise are the room all of this sits in.
07 Jul 2026
The portfolio became a file. Chapters, a résumé you can search, a terminal that only runs the commands written for it, and a card that asks why you are here before any of that. The portrait, the scroll progress, and the résumé download arrived the same week.
Chapter 05 — Writing
Oct 26, 2026
Building
WireHunt started as WireGar, a Nanyang Polytechnic final-year project. The Python version gave up on small pcaps. The Rust version did not ask permission.
Oct 18, 2026
Security
Pentest reports are written in a dialect called Polite Panic. Here is the dictionary.
Oct 12, 2026
Security
Every CTF team is the same six people in different hoodies. Identify yours before the scoreboard freezes.