Harshvir Dhaliwal
Cybersecurity Professional
Profile
Cybersecurity professional specializing in defensive security
operations, with expertise in vulnerability identification, threat
mitigation, and incident response. Skilled in cyber threat detection
and security automation using industry frameworks such as NIST and
MITRE ATT&CK to strengthen security postures.
Core Competencies
- Defensive Security Operations
- Vulnerability Assessment & Management
- Incident Response & Threat Mitigation
- Security Automation & Scripting
- SIEM Tools (Splunk) & Threat Detection
- Phishing Simulations & Security Awareness
- Firewall & VPN Configuration
- NIST & MITRE ATT&CK Frameworks
Experience
Information Security — Toyota Canada Inc.
September 2025 – Present | Scarborough, ON
-
Conduct weekly vulnerability scans across 10,000+ assets and partner
with infrastructure teams on remediation, contributing to 95% SLA
compliance for critical patches
-
Evaluated cybersecurity consultants’ Statements of Work and
capabilities, helping launch four strategic IAM, SIEM, and DLP
initiatives to strengthen Toyota Canada’s security posture
-
Developed a proof-of-concept alert-triage workflow that transformed
security telemetry into standardized incident handoff briefs,
reducing projected handoff time by 25% and improving runbook
consistency
-
Completed all assigned SOX controls on time by collecting audit
evidence, performing quarterly access reviews, and executing daily
security checks; supported an audit with zero major findings
-
Interviewed stakeholders across SecOps, GRC, Architecture, and
Third-Party Risk to develop Toyota Canada’s first Service Catalog
and Annual Calendar Tracker for clearer leadership visibility
Cybersecurity & IT Operations Specialist — GAMA Engineering
Ltd
January 2024 – May 2025 | Vaughan, ON
-
Managed and resolved cybersecurity-related IT tickets, reducing
resolution time by 35% and minimizing disruptions to daily
operations
-
Deployed automated patch management, reducing critical
vulnerabilities and improving system compliance
-
Conducted company-wide phishing simulations, decreasing
click-through rates by 80% and raising security awareness
-
Enhanced security event detection by assisting in Splunk deployment,
configuring alerts and dashboards to reduce incident response time
by 75%
-
Designed and enforced firewall rules and VPN configurations,
preventing unauthorized access attempts
-
Led the secure migration to AutoCAD 2024 across 20+ systems,
ensuring compliance with cybersecurity protocols
Automation Engineer — Synamedia
May 2021 – December 2022 | Scarborough, ON
-
Developed Python scripts to automate log analysis, reducing security
incident response times
-
Created automated reporting solutions to generate comprehensive
security and system health and performance reports, streamlining
workflows
-
Improved efficiency of security regression testing by automating
Python scripts, increasing test coverage by 30% and reducing manual
workload by 50%
-
Collaborated with QA teams to develop robust automation solutions,
enhancing testing accuracy and operational efficiency
Projects
Browser-based 3D flight + dogfighting sim with streamed real-world
terrain, AI enemies, and real-time multiplayer over WebSockets.
Technologies: Three.js, WebGL, Vite,
Node.js, WebSocket (ws), 3D Tiles, JavaScript
AI social simulation platform (Twitter-like) where autonomous bots
interact in real time while humans observe. Features persistent
memory and emergent social dynamics.
Technologies: Next.js 14, TypeScript,
Tailwind CSS, tRPC, PostgreSQL + pgvector, Drizzle ORM, Redis +
BullMQ, Socket.io, Docker Compose
Full-featured fitness tracking app with workout logging, progress
analytics, training programs, and fitness calculators.
Technologies: Flutter, Dart, Hive
Modern, client-side web application for managing and editing PDF
files directly in the browser. Merge, split, reorder, and rotate
pages with live previews.
Technologies: React, TypeScript,
PDF.js, Vite, TailwindCSS, IndexedDB
Self-hosted web app for downloading videos from popular sites, with
format and quality selection powered by a yt-dlp backend.
Technologies: Python, Flask
Automated phishing simulations that transform real-world user
behavior into dynamic risk scores for targeted, high-impact security
training.
Technologies: Go, PostgreSQL, React,
Docker, SendGrid, REST API
Toyota Competition entry that aims to boost sales of Battery
Electric Vehicles (BEVs).
Technologies: React, Three.js,
TypeScript
Cybersecurity information aggregator that uses multiple threat-intel
APIs to assess and summarize risk.
Technologies: React, TypeScript,
Express.js, PostgreSQL, Drizzle ORM, TailwindCSS, WebSocket
On-Rails/Gallery wormhole 3D arcade shooter. Shoot Targets and
travel through an infinite procedurally generated tunnel.
Technologies: Three.js, WebGL,
JavaScript, GLSL Shaders
Automotive CVE Scanner that converts a vehicle's VIN (or manual
selection) into make/model/year and queries the National
Vulnerability Database (NVD) for relevant cybersecurity exposures.
Technologies: Python, Streamlit,
Pandas, Requests, NHTSA API, NVD API
A private, censorship-free, ad-free metasearch engine. Self-hosted
SearXNG with Docker Compose, Nginx reverse proxy, and custom UI.
Technologies: SearXNG, Docker, Nginx,
Valkey, Certbot, Cloudflare, Alpine Linux
Education
Bachelor of Information Technology – Cybersecurity (B.IT)
Seneca Polytechnic
Relevant Coursework: Network Security, Ethical Hacking, Python for
Cybersecurity, Incident Response
Bachelor of Science in Biological & Biomedical Sciences (B.SC)
York University — Graduated
Teaching Assistant - Biostatistics, Genetics, and Population Genetics
Developed strong communication, tutoring, and mentorship skills
through assisting students in complex scientific concepts and
statistical problem-solving
Achievements
-
NeoTokyo CodeBreaker Competition Winner —
Winner ($140,000 USD prize) in an international cryptography and
code-breaking competition
Volunteerism
President – Not Just Tourists (York University)
-
Led 100+ volunteers to deliver $200K+ in medical supplies globally,
coordinating secure logistics and distribution
-
Implemented a digital donor data management system, achieving 99%
data accuracy and HIPAA compliance
Additional Info
-
Security Tools & Methodologies: Splunk, Wireshark, Firewalls,
VPN, MITRE ATT&CK, NIST Framework, Metasploit, Zero Trust
Architecture
-
Programming & Scripting Languages: Python, Bash, Shell
Scripting, Java, C++, C, JavaScript, SQL
- Web Technologies: HTML, Javascript, CSS
- Operating Systems: Linux (Red Hat, Ubuntu), Windows, Unix
- Networking: TCP/IP, Network Topologies
- Cloud & DevOps: AWS Cloud, Jenkins, Git
>
This portfolio is optimized for JavaScript-enabled browsers for
the full interactive experience.
>
Enable JavaScript to access 3D visualizations, real-time data,
and interactive elements.