Chad Norman
About
- Information Security Professional
- CloudSec
- Threat Hunter
- GenAI and Automation Tinkerer
I’ve spent the better part of two decades in IT and cyber security. I started in IT MSP server and customer support, then moved into security consulting, helped architect and engineer SOCs, built threat hunting capabilities and led a PCI DSS compliance engagement.
These days I hunt threats and architect solutions. An appetite for learning has also pulled me into GenAI, agentic workflows, AI-assisted coding and the challenge of securing autonomous systems.
I’ve always liked figuring out how things work, how they break and how to make them better. This blog is where I share what I learn, what I build, and the odd rabbit hole.
What I do
Threat hunting
Hypothesis-led hunts across endpoint, identity and cloud telemetry, turned into detections that keep running.
Security operations
Detection and response, SOC design, and the automation that keeps a small team ahead of its alerts.
Strategic advisory
Security strategy, risk and compliance in plain language.
Solution architecture
Cloud and security architecture with zero trust and IAM designed in, not bolted on afterwards.
GenAI, built and audited
I build with Claude Code, Cursor and agents most days, and review how firms let models near their data.
Agentic safety
Permissions, guardrails and oversight for autonomous agents, so they stay in scope and leave an audit trail.
Credentials
Security and governance
- CISSP
- CySA+
- Certified Information Privacy Technologist (CIPT)
- Certified Network Security Specialist
Cloud
- Professional Cloud Architect
- Professional Workspace Administrator
- Professional Cloud Security Engineer
AI
- AI Security and Governance
- Claude Code in Action
Technology
- SASE
- Vulnerability Management
- Exposure Management
- SandBlast
Tools and frameworks
Technology
- Threat Intelligence
- Risk Management
- Cloud Security
- Zero Trust
- IAM
- SASE
- DLP
- CASB
- SWG
- AV
- EDR
- Vulnerability Management
- CSPM
- IPS
- SIEM
Frameworks
- PCI DSS
- NIST 800-53
- CIS
- POPIA