Skip to content
View tweedge's full-sized avatar
🦝
what the devs know: 1. whole codebase is spaghetti 2. spaghetti is delicious
🦝
what the devs know: 1. whole codebase is spaghetti 2. spaghetti is delicious
74 followers · 31 following

Achievements

Achievement: YOLOAchievement: Public SponsorAchievement: QuickdrawAchievement: StarstruckAchievement: Pull Sharkx2Achievement: Arctic Code Vault Contributor

Achievements

Achievement: YOLOAchievement: Public SponsorAchievement: QuickdrawAchievement: StarstruckAchievement: Pull Sharkx2Achievement: Arctic Code Vault Contributor

Organizations

@foodtrax @partridge-tech @securitygolf @DeepCISO @r-cybersecurity @mouseparty-org

Block or report tweedge

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Please don't include any personal information such as legal names or email addresses. Maximum 100 characters, markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tweedge/README.md

Hi, I'm Chris 👋

I'm a security person in a software world. My focus is on bringing holistic and pragmatic security solutions to software companies, and I'm especially partial to risk-reducing solutions which improve development processes or developer experience (bingo!).

Currently, I'm a Cloud Security manager @ Amazon as part of the Application Security organization, helming a multifaceted CloudSec function that focuses on promoting long-term sustainable architecture. My team is not the "run ScoutSuite and call it a day" type, thankfully. :)

My notable past roles include:

  • Sr. Security Engineer, Amazon (completing an L4-through-L6 IC journey)
  • Security Engineer, Vulnerability Management @ Luta Security on the Zoom contract
  • Product Security Engineer @ Datto, and Software Engineer before that

I do security research across many topic in my spare time (read: whatever grabs my interest, little real theme), and either dump half- to fully-baked repos on GitHub or publish posts on my blog. If you'd like to chat or connect, you can find my social media and ways to message me on my contact page.

Pinned Loading

  1. springcore-0day-en springcore-0day-en Public

    Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.

    Python 107 36

  2. ru-ok ru-ok Public

    Checking the status of Russian internet properties (via RIPE Atlas) being targeted by Ukraine's hacktivist "IT ARMY" Telegram group (and others).

    Python 16 6

  3. emerging-threats-pihole emerging-threats-pihole Public

    Block malware on your network using your PiHole, using threat intelligence extracted from Emerging Threats rulesets.

    Python 58 3

  4. unishox2-py3 unishox2-py3 Public

    A package for Unicode-friendly string compression using Unishox2

    Python 21 2

  5. Netflix-Skunkworks/policyuniverse Netflix-Skunkworks/policyuniverse Public

    Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.

    Python 428 61

  6. tldr tldr Public

    TLD records archive. Revisiting the original TLDR project by mandatoryprogrammer, on the hunt for more root nameserver changes.

    Python 11 11