Skip to content
View karlllewis's full-sized avatar
🌏
🌏

Block or report karlllewis

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
karlllewis/README.md

Security Nomad | Field CISO | Startup Ally
Building practical, developer-aligned security for fast-moving teams.


🚀 What I Do

  • 🔒 Secure-by-Default Systems — guardrails in Git, not gatekeepers in suits.
  • 🤖 AI + Agentic Security — exploring how LLMs reshape both attacks and defenses.
  • ☁️ Cloud-Native Security — Kubernetes, Zero Trust, and identity-first architectures.
  • 🎤 Global Security Culture — Studying patterns that transcend technology

🛠️ Current Projects

  • Cloud Native CISO — A platform helping startups bake in practical cloud & AI-native security.
  • Secure-by-Default Starter v1.0.0 — GitHub template repo for startups to ship security with their first commit.
  • AI Security Labs — hands-on experiments combining GitOps, LLMOps, and modern security tooling.

🌍 Backstory

I’ve led security in boardrooms, data centers, and startups just trying to get their first enterprise customer.

At Duo Security (Cisco), I helped launch the APJC region — guiding execs and engineers through Zero Trust adoption before it had a playbook.

Then I traded suits for a backpack — three years, 12 countries, and a crash course in how different cultures build trust. That perspective now shapes how I architect security for distributed teams and AI-native startups shipping at breakneck speed.

Today I run Cloud Native CISO — helping small teams bake security into how they build, from the very first commit.


✅ Quick Stats

  • 🎤 Speaker & evangelist on cloud + AI-native security
  • 🔒 CISSP, CCSP, AWS SA Pro, ISSAP, Kubestronaut
  • 🌍 Based anywhere with WiFi (previously Singapore, Melbourne, Tokyo, San Francisco)

⚡ Tech & Tools

Kubernetes
Cilium
FluxCD
GitHub Actions
LLMs
DevSecOps


🤝 Let’s Connect


⭐️ If you’re building ambitious products and believe security should be leverage, not liability — let’s talk.

Pinned Loading

  1. karlllewis karlllewis Public

  2. cloudnativeciso/secure-by-default-starter cloudnativeciso/secure-by-default-starter Public

    A minimal, security-first starter kit that adds pre-commit and CI/CD guardrails to any codebase — catch secrets, scan dependencies, and generate SBOMs before bad code ships.

    Makefile 1