Harshvir Dhaliwal
Security, Cloud & AI Automation
I secure systems and automate the busywork. Experience at TELUS and
Toyota Canada.
Profile
I keep companies secure and automate the manual work that slows
security and IT teams down. At TELUS and Toyota Canada I worked across
security operations, vulnerability management, cloud and compliance,
and built Python and AI tools that turned hours of work into minutes.
Competencies
- Security Operations
- Vulnerability Management
- Cloud & Zero Trust Security
- Python & AI Automation
- Incident Response
- Risk, Audit & Compliance
- IT Operations & Support
- Technical Writing & Training
Experience
Security Infrastructure Operations (SIOPS) — TELUS
January 2026 – August 2026 | Toronto, ON
-
Cut a weekly email-threat review from 1.5 hours to 12 minutes by
automating it
-
Built a Python tool that turns 200MB of logs into a 30-second
diagnosis with fix steps
-
Helped move the company from legacy web proxies to Zscaler Zero
Trust, keeping staff securely connected throughout
-
Wrote the team’s troubleshooting knowledge base, saving front-line
support 4+ hours a week
Information Security — Toyota Canada Inc.
September 2025 – February 2026 | Scarborough, ON
-
Scanned 10,000+ systems for vulnerabilities every week; 95% of
critical fixes landed on time
-
Prototyped an AI tool that summarizes security alerts, projected to
cut handoff time by 25%
-
Finished every SOX audit task on time; the audit closed with zero
major findings
-
Vetted outside consultants, helping launch four security projects
(identity, monitoring, data-loss prevention)
-
Created the security team’s first service catalog and annual
planning calendar
Cybersecurity & IT Operations Specialist — GAMA Engineering
Ltd
January 2024 – May 2025 | Vaughan, ON
-
Cut phishing click rates by 80% with company-wide simulations and
training
-
Helped set up Splunk monitoring, cutting incident response time by
75%
- Resolved IT and security tickets 35% faster
- Automated software patching across the company
- Managed firewall rules and VPN access
- Led a secure upgrade to AutoCAD 2024 across 20+ machines
Automation Engineer — Synamedia
May 2021 – December 2022 | Scarborough, ON
-
Automated security testing in Python: 30% more coverage, half the
manual work
- Automated log analysis to speed up incident response
- Built automatic security and system-health reports
Projects
Browser-based multiplayer port of The Simpsons: Hit & Run,
compiled to WebAssembly with a connected Springfield map for shared
exploration.
Technologies: WebAssembly, WebGL,
JavaScript, WebSocket
Browser-based 3D flight + dogfighting sim with streamed real-world
terrain, AI enemies, and real-time multiplayer over WebSockets.
Technologies: Three.js, WebGL, Vite,
Node.js, WebSocket (ws), 3D Tiles, JavaScript
A Twitter-like network where autonomous AI agents post and reply to
each other in real time while humans watch. Agents keep long-term
memory.
Technologies: Next.js 14, TypeScript,
Tailwind CSS, tRPC, PostgreSQL + pgvector, Drizzle ORM, Redis +
BullMQ, Socket.io, Docker Compose
Fitness tracker with workout logging, progress charts, training
programs and calculators.
Technologies: Flutter, Dart, Hive
Edit PDFs entirely in the browser: merge, split, reorder and rotate
pages with live previews.
Technologies: React, TypeScript,
PDF.js, Vite, TailwindCSS, IndexedDB
Self-hosted web app for downloading videos from popular sites, with
format and quality selection powered by a yt-dlp backend.
Technologies: Python, Flask
Phishing-simulation platform that turns how staff respond to test
emails into risk scores, so training goes to the people who need it.
Technologies: Go, PostgreSQL, React,
Docker, SendGrid, REST API
Entry for a Toyota case competition on boosting sales of battery
electric vehicles (BEVs).
Technologies: React, Three.js,
TypeScript
Checks an IP, URL or file hash against VirusTotal and AbuseIPDB and
returns one combined risk score. 500+ lookups a month.
Technologies: React, TypeScript,
Express.js, PostgreSQL, Drizzle ORM, TailwindCSS, WebSocket
3D on-rails arcade shooter. Shoot targets while flying through an
endless, procedurally generated tunnel.
Technologies: Three.js, WebGL,
JavaScript, GLSL Shaders
Finds known security vulnerabilities for a car. Turns a VIN (or a
manual pick) into make, model and year, then searches the National
Vulnerability Database. 150+ scans a month.
Technologies: Python, Streamlit,
Pandas, Requests, NHTSA API, NVD API
A private, ad-free metasearch engine. Self-hosted SearXNG behind
Nginx, run with Docker Compose, with a custom UI.
Technologies: SearXNG, Docker, Nginx,
Valkey, Certbot, Cloudflare, Alpine Linux
Education
Bachelor of Information Technology – Cybersecurity (B.IT)
Seneca Polytechnic
Coursework: network and cloud security, incident response and
forensics, vulnerability analysis, identity, compliance, Python
Bachelor of Science in Biological & Biomedical Sciences (B.Sc)
York University — Graduated
Teaching Assistant for Biostatistics, Genetics and Population
Genetics: ran labs, tutorials and office hours
Achievements
-
NeoTokyo CodeBreaker Competition Winner (2023)
— Won the $140,000 USD prize in an international cryptography
and code-breaking competition
Volunteerism
Vice President – Seneca Cybersecurity Club
-
Brought in 12 industry speakers, leading to 8 internship referrals
or mentorships
- Ran monthly capture-the-flag events and hackathons
President – Not Just Tourists (York University)
-
Led 100+ volunteers delivering $200K+ of medical supplies worldwide
-
Built a donor database with 99% data accuracy and strong privacy
practices
Skills
-
AI & Automation: Python, LLM tools (Claude, Gemini), AI agents,
n8n, Fuel iX, PowerShell, API integrations
-
Security Tools: Splunk, CrowdStrike, Zscaler, Cisco ESA, QRadar,
Nessus, Wireshark, Metasploit
- Cloud: AWS, Azure, GCP, Microsoft Sentinel & Defender
-
Identity & Compliance: Okta, Entra ID, OneTrust, SOX, NIST,
MITRE ATT&CK
-
Programming: Python, JavaScript/TypeScript, SQL, Bash, Java, C/C++
-
Web & Data: React, Express, PostgreSQL, Pandas, R, Git, Jenkins
-
Certifications: Azure Security Engineer (AZ-500), Google
Cybersecurity Certificate, AI for Cybersecurity (Johns Hopkins)
>
This portfolio is optimized for JavaScript-enabled browsers for
the full interactive experience.
>
Enable JavaScript to access 3D visualizations, real-time data,
and interactive elements.