Skip to content
View CHDevSec's full-sized avatar

Block or report CHDevSec

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
CHDevSec/readme.md
 ██████╗██╗  ██╗██████╗ ███████╗██╗   ██╗███████╗███████╗ ██████╗
██╔════╝██║  ██║██╔══██╗██╔════╝██║   ██║██╔════╝██╔════╝██╔════╝
██║     ███████║██║  ██║█████╗  ██║   ██║███████╗█████╗  ██║     
██║     ██╔══██║██║  ██║██╔══╝  ╚██╗ ██╔╝╚════██║██╔══╝  ██║     
╚██████╗██║  ██║██████╔╝███████╗ ╚████╔╝ ███████║███████╗╚██████╗
 ╚═════╝╚═╝  ╚═╝╚═════╝ ╚══════╝  ╚═══╝  ╚══════╝╚══════╝ ╚═════╝
                                                                                                                                                                                                                                            

Typing SVG

> whoami

┌──(chdevsec㉿kali)-[~]
└─$ ./about_me.sh

[+] Name: Caio Henrique
[+] Role: Security Engineer | DevSecOps
[+] Focus: Application Security | Cloud & Automation
[+] Experience: 6+ years protecting systems and building security into the development lifecycle
[+] Mission: Automate security controls, reduce vulnerabilities at scale, and help engineering teams ship secure code faster

> cat skills.txt

Area Description
DevSecOps Engineering Automated CI/CD security gates (SAST/SCA/DAST), secrets scanning, IaC validation, and policy enforcement
Vulnerability Management Led Ubuntu vulnerability reduction from 56% → 31% (44% reduction), exceeding targets by 15%
Security Tooling Built SecScan in Go — eliminates false positives in SCA scans, integrates with Snyk/Wazuh/Slack
Cloud Security AWS/GCP security automation, guardrails, compliance validation, and runtime protection
Detection Engineering SIEM/EDR/XDR integration and optimization (Elastic, Wazuh, SentinelOne)

> ls -la /tools/

Languages & Automation

Python Go Bash PowerShell TypeScript

DevSecOps & AppSec

Snyk Checkov Docker Kubernetes GitLab CI

Cloud & Infrastructure

AWS GCP Terraform Linux

Security & Monitoring

Wazuh Elastic SentinelOne Nessus Qualys

Frameworks & Standards

OWASP MITRE ATT&CK NIST ISO 27001 CIS


> git log --graph

Contribution Graph

> cat achievements.log

Achievement
Led Ubuntu vulnerability reduction from 56% → 31% (44% reduction)
Built SecScan in Go — now covers 60% of org's Go stack
Automated CI/CD security gates reducing manual review time by 70%
Implemented AWS/GCP guardrails protecting 200+ cloud resources
Integrated Wazuh + SentinelOne for unified threat detection

> curl -X GET /social

Portfolio LinkedIn GitHub


Visitor Count

┌────────────────────────────────────────────────────────────────────┐
│                                                                    │
│    "The quieter you become, the more you are able to hear."        │
│                                            — Kali Linux            │
│                                                                    │
└────────────────────────────────────────────────────────────────────┘

Pinned Loading

  1. RedPhaton RedPhaton Public

    Python 4 1

  2. ShadowPort ShadowPort Public

    Python 3 1

  3. Recon_pro_v2 Recon_pro_v2 Public

    Python 3 1

  4. BreachHunter BreachHunter Public

    Python 4

  5. DirBusterPro DirBusterPro Public

    Python 3

  6. recon_pro.py recon_pro.py Public

    HTML 18 2