homepage
Open menu
Contact Sales

Brandon Evans

Brandon is the owner and an InfoSec Consultant at On-Brand Technologies LLC, a consultancy helping organizations secure their applications and other workloads in multi cloud environments, specializing in AWS, Azure, and Google Cloud. Prior to starting his consultancy, Brandon led the secure development training program at Zoom Video Communications. He began his career as a Software Engineer, where he worked on both the core product of a startup, later acquired by a Fortune 500 organization, and on various products spanning a multi-billion dollar enterprise. Brandon is lead author for SEC510: Public Cloud Security: AWS, Azure, and GCP, a contributor to SEC540: Cloud Security and DevSecOps Automation, host of Cloud Ace podcast, Season 1, an analyst for the SANS Multicloud Survey, and a multi-year RSA Conference presenter.

More About Brandon
Specialties
Photo

Profile

Brandon is an independent consultant conducting penetration tests, performing secure code reviews, and assessing the overall security posture of each environment across multiple clouds. Most importantly, he provides comprehensive, practical, actionable, and easy to understand solutions to address his findings. Previously, Brandon led Zoom Video Communication's secure development training program. He managed its implementation, measured its outcomes, and brought it to the industry standard as assessed by the Building Security In Maturity Model (BSIMM).

He started his professional career as a software engineer with Smartvue Corporation, an Internet-of-Things video surveillance startup that has since been acquired by Johnson Controls. He then continued as a software engineer at Asurion. After creating many web applications over the years, he eventually wanted to try something new. He was offered a spot in the Security Mavens program at Asurion, and jumped at the chance. After taking three SANS courses, Brandon knew that security was where he belonged, so quickly transferred to the internal product security team performing secure code reviews, conducting penetration tests, developing secure coding patterns, and evangelizing the importance of creating secure products.

Brandon understands that one of the biggest barriers between development and security is the conflicting cultures. Developers want to develop. Security wants to have 100% security. These two goals are mutually exclusive! Given his experience in both areas, Brandon has been able to support both types of professionals reach across the aisle to improve DevSecOps at their organization. He believes that in order to prescribe solutions to development teams, one must walk a mile in their shoes. Brandon is happy to walk side-by-side with you as you face these challenges head on, constantly reminding you that you're not alone. Secure development is hard! Brandon is a cloud agnostic expert teaching multi cloud security to hundreds of students annually. He prides himself in making his classes fun, engaging, and memorable with the sharing of personal experience, war stories, polling the audience, and telling relevant jokes.

Throughout his security journey, Brandon has earned five GIAC certifications - GPCS (#1), GCSA, GPEN, GSTRT, GWAPT, GSEC, and GSSP-JAVA. Most recently he earned Microsoft Certified: Azure Security Engineer Associate, as well as the AWS Certified Security - Specialty certification and he holds a Bachelor's Degree in Computer Science from Binghamton University, where in his senior year, Brandon won the “Best Use of the SendGrid API” at the HackBU Hackathon. Additionally, he has won four Security Innovation Capture the Flag events, also placing second at their CTF at DEF CON 27, and in 2017 Brandon won the Asurion Hackathon for making an Alexa skill for cellphone support. Brandon taught the first ever cohort at the Vanderbilt University Web Development Coding Bootcamp in 2019, he’s a contributor to the OWASP Serverless Top 10 Project, and a co-leader for the Nashville OWASP chapter. 

In his spare time, Brandon enjoys playing the drums, chess, classic video games, and rock climbing.

ADDITIONAL CONTRIBUTIONS BY BRANDON EVANS

SPEAKING ENGAGEMENTS

WEBCASTS / VIDEOS

LIVESTREAMS

WHITEPAPERS

TOOLS & MORE