About
I'm Rafael Keller, a security engineer based in Brisbane.
I've spent the last 15 years building secure-by-default tooling for product teams, most recently on a small team where I look after supply chain security and session management. Before that I bounced between agencies, startups and one very large company.
I started The Heap Notes in 2025 as a place to think out loud. Most posts begin as notes from real projects: something broke, I fixed it, and I wanted to remember why. If one of them saves you an afternoon, it was worth writing.
What I write about
- Supply chain security
- Threat modeling
- Session management
- Least privilege
- Secret rotation
Get in touch
The best way to reach me is by email at hello@usus101.cybergalaxy.me. I read everything, even if replies take a little while. You can also find me on GitHub and Mastodon.
Opinions here are my own and not those of any employer, past or present.