Catheren

Block or report Catheren

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Close all issues, pull requests, and discussions opened by this user Content in all repositories owned by your account will be closed.

Add an optional note

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Overview Repositories 18 Projects Packages Stars 13

Overview
Repositories
Projects
Packages
Stars

Catheren/README.md

Hey, I'm Catheren 👋

Security Engineer with a networking foundation and a cloud security focus. Security is rarely the easy path — but I try to reduce the friction enough that people don't mind taking it. That means automating the enforcement, building the right processes, and nudging teams toward secure defaults without getting in their way.

I got into security because no two days are the same. Every morning brings a different problem, a different attack surface, a different constraint to work around. That variety is what keeps me sharp — and honestly, it's just fun.

Currently exploring AI security — because the attack surface is shifting faster than most defences are.

CISSP · Azure Security Engineer · AWS Solutions Architect

A few things I've built

terraform-security-lab — IaC security pipeline with automated scanning and a CI/CD gate that blocks insecure PRs
aws-security-posture — Multi-account AWS security architecture with GuardDuty, Security Hub, Config, and Inspector
securenotes-threat-model — 46-threat STRIDE/DREAD model with PIPEDA compliance considerations
End-to-end-Devsecops-Pipeline — Jenkins pipeline with SAST, DAST, container scanning, and SCA integrated
cloud-security-engineering-lab — IAM attack simulation detected with a Python CloudTrail detection engine
Unified-Log-Parser-and-Enricher — Multi-source log normalization and GeoIP enrichment pipeline

What I build

Cloud security · DevSecOps · Detection engineering · Threat modeling · Security automation

When I'm not at a keyboard, I'm out walking, listening to podcasts, and trying to live a little more slowly.

📫 Open to conversations — feel free to reach out.

Pinned Loading

securenotes-threat-model securenotes-threat-model Public

STRIDE-based threat model for a hypothetical web application — demonstrates systematic threat identification, DREAD risk scoring, and mitigation planning
aws-security-posture aws-security-posture Public

A hands-on AWS cloud security project documenting the architecture, tooling, and decisions behind a multi-account security foundation built for a small-to-medium company.

Python
terraform-security-lab terraform-security-lab Public

Terraform security lab — modular IaC with automated scanning (tfsec, Checkov, Gitleaks) and a custom Python policy scanner enforced via GitHub Actions CI/CD.

HCL
End-to-end-Devsecops-Pipeline End-to-end-Devsecops-Pipeline Public

Java
cloud-security-engineering-lab cloud-security-engineering-lab Public

Python
Unified-Log-Parser-and-Enricher Unified-Log-Parser-and-Enricher Public

A Python tool to parse, normalize, and enrich logs from multiple sources — SSH authentication logs, Nginx access logs, and firewall logs — outputting structured JSON enriched with GeoIP country data.

Jupyter Notebook