zac wesley-brown

Zac
Wesley‑Brown

Lead Full-Stack Developer & Security Researcher

Head of Software Engineering at Aotea Energy. Consultant at ZWB Consulting. Building security tooling at ZWB.SH. Auckland, New Zealand.

Get in touch →Experience

Who am I?

I build software, and I break it.

Right now I lead software engineering at Aotea Energy, a startup making home energy storage. I joined as lead developer, built the team, and now look after product, architecture and the technical side of the business: mostly Rust and AWS.

Before that I ran penetration tests and security assessments at Quantum Security, and led development at Equity AI. Since 2018 I've consulted under ZWB Consulting for everyone from multinationals to small businesses, on both sides of the line: building systems, and testing how they fail.

Off the clock: watches and plants.

Accent type: Hacked by David Libeau.

Experience

  1. 2024 – now

    Head of Software Engineering

    Aotea Energy · Full time

    Leading the software team and shaping company strategy from the technical side. Took the core products and the home energy storage system from early versions to a product that scales in cost and in feature delivery.

    Product management / Leadership / Rust / AWS / Software design

  2. 2022 – 2024

    Lead Developer

    Aotea Energy · Full time

    Built the software team at an early-stage startup. Proved out the first product ideas quickly, then set the software strategy and structure so the team kept its momentum.

    Node.js / Express / MongoDB / AWS / React Native

  3. 2021 – 2022

    Lead Developer

    Equity AI · Contract

    Led development at a fast-moving AI startup, managing people and resources as well as building the product.

    Resource management / Python / AI/ML / GIS

  4. 2021 – 2022

    Security Consultant

    Quantum Security · Full time

    Penetration tests and security assessments for client businesses, with written evaluation reports on their critical issues.

    Vulnerability scanning / Technical report writing / AD & web exploitation

  5. 2018 – now

    Consultant

    ZWB Consulting · Part time / contract

    Software development and security services for clients from multinationals to SMEs. Knowing how systems are built and how they break, from both sides.

    Full-stack development / Penetration testing / Security consulting

Education

  1. 2021 – 2024

    BSc, Computer Science

    University of Auckland

    Focused on cyber security and machine learning. Certificates of Outstanding Achievement in Object Oriented Software Development, Software Fundamentals, and Computer Systems.

Projects

2025 – now · Founder, engineer

ZWB.SH

Security tooling studio. Pull-request review, CI audits, supply-chain reports and sandboxing for coding agents.

security / astro / cloudflare / ai2018 – now · Consultant

ZWB Consulting

Software development and security services, from multinationals to small businesses. Audits, penetration testing and custom builds.

consulting / pentesting / full-stack2020 · Penetration tester

Bureau of Meteorology disclosure

Found a boolean-based blind SQL injection on bom.gov.au that exposed server data and indirect paths toward remote code execution. Reported through responsible disclosure.

sqli / responsible-disclosure / web2020 · Full-stack developer

jamespeters.co.nz

Art-selling website with a custom admin panel backend and dynamic listings served from MongoDB.

node / mongodb / e-commerce

All projects →

Writing

Blog →

Contact

get in touch

Work, a project, or a security issue. Messages go straight to my inbox.

zac@zacwesleybrown.comLinkedInGitHub