Hi, I’m Matt.
Cybersecurity analyst in New York. I lead security testing for NYC government; off the clock, I build things — that’s what this page is for.
About
I came into security the long way. It started as an intern at Oak Ridge National Laboratory, working on network security for what was then the fastest academic supercomputer in the world — in practice, a great deal of Splunk.
Then eight years at SAIC, a federal IT contractor whose work runs through the DoD. I spent all of it on the IT side, building my way around operating systems with hands on the keyboard. It turned out to be a good on-ramp into security testing later. Somewhere in there I picked up a bachelor’s in cybersecurity, a pile of certifications, and a top-500 global rank on Hack The Box.
These days the day-to-day is pentesting systems I can’t name here and writing the reports that follow.
Projects
All of it runs under SideQuest Ventures L.L.C, my own company.
- predsfan.com — a fan site for the Nashville Predators, with AI-generated game previews and recaps published on a schedule. Rather more backend than the front end lets on.
- rangersfan.net — the same platform pointed at the Rangers. Standing up the second one is how you find out which parts were a hockey site and which parts were a platform.
- xdf.nyc — a long-held personal domain I use for C2 infrastructure and domain-trust research. The kind of project that gets more useful the longer you have owned the name.
- cityofnewyork.co — “NYC, right now.” Real-time transit and weather, tonight’s events, and a growing set of neighborhood guides. Mostly AI-drafted, human-reviewed.
- tokendrift.ai — source-verified LLM API pricing: every number carries the date it was checked and the page it was read from. Collecting the prices was the easy part; proving where each one came from was the work.
- More in flight — a few things not ready to show yet.
Contact
Email works best; LinkedIn works second-best.
- Email me@mattosterman.nyc
- LinkedIn /in/matthewostermannyc