Summary
Brett Gravois is a Senior Security Engineer based in the Los Angeles area with over 20 years in IT and a decade focused on application security, penetration testing, and vulnerability management across startups to enterprise environments. He combines hands-on offensive testing experience at firms like Veracode, Rapid7, Coalfire and Esri with program-level work—founding and leading the OWASP Inland Empire chapter and contributing as an independent researcher for platforms such as Synack and Bugcrowd. Brett excels at translating technical findings into executive-level risk guidance and practical remediation, with deep familiarity in PCI practices, automated testing workflows, and API/web app exploit techniques. Colleagues know him for a disciplined outreach approach—preferring targeted recruiter or mutual-introduction conversations—which reflects a careful, consultative professional style. An unexpected detail: his background spans from hands-on helpdesk and systems administration roles through senior security consulting, giving him rare empathy for both engineering and operational perspectives in security assessments.
10 years of coding experience
10 years of employment as a software developer
AS, Information Technology, AS, Information Technology at Platt College
Theater Arts; Technical Theater, Theater Arts; Technical Theater at Chaffey College