About

My story

I’m Brandon Eckert, an information security professional based in Pittsburgh, Pennsylvania, with over 25 years of experience in IT and Security. An early interest in hacking and computer viruses sparked a lasting curiosity about how systems work and how to secure them.

My career began in software development for a manufacturing company, where I built applications for production reporting and inventory control. These projects connected software with manufacturing operations, from collecting metrics from production presses to integrating barcode tracking and industrial scales.

I later joined a pet food manufacturer as a desktop technician and advanced to systems administrator, supporting Active Directory, Exchange, VMware, and thin client environments. That experience gave me a strong foundation in the infrastructure that organizations depend on every day.

Building on that foundation, I moved into financial services, spending over a decade progressing from Information Security Engineer to Information Security Officer, leading the bank’s information security program. I then joined a Fortune 400 financial institution, where I led Security Assurance Testing and Technology Policy Exception Management.

Today, I lead Product Security at a healthcare technology and operations SaaS company. My background in software development, infrastructure, and security leadership shapes a practical approach to protecting products, grounded in an understanding of how technology is built, operated, and used.

Outside of work, I enjoy researching emerging cybersecurity threats, working through VulnHub challenges, and making time for the gym, cars, and video games.

Certifications

• EC-Council Certified Chief Information Security Officer (C|CISO)
• Offensive-Security Certified Expert (OSCE3)
• Offensive-Security Exploit Developer (OSED)
• Offensive-Security Expert Penetration Tester (OSEP)
• Offensive-Security Web Expert (OSWE)
• Offensive-Security Certified Professional (OSCP)
• GIAC Cyber Threat Intelligence (GCTI)
• GIAC Reverse Engineering Malware (GREM)
• GIAC Information Security Professional (GISP)
• GIAC Certified Forensic Examiner (GCFE)
• GIAC Certified Incident Handler (GCIH)
• GIAC Security Essentials (GSEC)
• CompTIA Network+
• CompTIA A+