Harshvir Dhaliwal
Cybersecurity Professional
Vulnerability management · Threat detection · Security automation
Profile
Cybersecurity professional specializing in defensive security
operations, with expertise in vulnerability identification, threat
mitigation, and incident response. Skilled in cyber threat detection
and security automation using industry frameworks such as NIST and
MITRE ATT&CK to strengthen security postures.
Core Competencies
- Defensive Security Operations
- Vulnerability Assessment & Management
- Incident Response & Threat Mitigation
- Security Automation & Scripting
- SIEM Tools (Splunk) & Threat Detection
- Phishing Simulations & Security Awareness
- Firewall & VPN Configuration
- NIST & MITRE ATT&CK Frameworks
Experience
Security Infrastructure Operations (SIOPS) — TELUS
January 2026 – August 2026 | Toronto, ON
-
Supported the enterprise migration to Zscaler Zero Trust cloud
security from legacy WSA web-proxy infrastructure, managing PAC-file
policy, VPN connectivity, and endpoint registry configuration to
maintain secure, authenticated web access across enterprise
endpoints
-
Triaged email-borne threats in the Cisco ESA secure email gateway,
separating genuine phishing and malicious mail from false positives,
then automated the workflow to cut weekly quarantine review from 1.5
hours to 0.2 hours, reclaiming 75+ hours of senior security
consultant time annually
-
Built a Python diagnostic tool for Zscaler client-health logs that
parses 200MB log bundles into a 30-second report with ZDX-aligned
health scores, automated root-cause analysis, and OS-aware
remediation playbooks, accelerating investigation of connectivity
and security-policy failures
-
Authored a centralized Zscaler security-troubleshooting knowledge
base on Confluence (SSL/server-probe failures, GCP/VPC
service-control errors, Citrix/Salesforce access), reclaiming 4+
hours/week of Tier-1 time, reducing SME escalations, and
standardizing operational tooling under a shared, version-controlled
team GitHub
Information Security — Toyota Canada Inc.
September 2025 – February 2026 | Scarborough, ON
-
Conducted weekly vulnerability scans across 10,000+ assets and
partnered with infrastructure teams on remediation, contributing to
95% SLA compliance for critical patches
-
Evaluated cybersecurity consultants’ Statements of Work and
capabilities, helping launch four strategic IAM, SIEM, and DLP
initiatives to strengthen Toyota Canada’s security posture
-
Developed a proof-of-concept alert-triage workflow that transformed
security telemetry into standardized incident handoff briefs,
reducing projected handoff time by 25% and improving runbook
consistency
-
Completed all assigned SOX controls on time by collecting audit
evidence, performing quarterly access reviews, and executing daily
security checks; supported an audit with zero major findings
-
Interviewed stakeholders across SecOps, GRC, Architecture, and
Third-Party Risk to develop Toyota Canada’s first Service Catalog
and Annual Calendar Tracker for clearer leadership visibility
Cybersecurity & IT Operations Specialist — GAMA Engineering
Ltd
January 2024 – May 2025 | Vaughan, ON
-
Managed and resolved cybersecurity-related IT tickets, reducing
resolution time by 35% and minimizing disruptions to daily
operations
-
Deployed automated patch management, reducing critical
vulnerabilities and improving system compliance
-
Conducted company-wide phishing simulations, decreasing
click-through rates by 80% and raising security awareness
-
Enhanced security event detection by assisting in Splunk deployment,
configuring alerts and dashboards to reduce incident response time
by 75%
-
Designed and enforced firewall rules and VPN configurations,
preventing unauthorized access attempts
-
Led the secure migration to AutoCAD 2024 across 20+ systems,
ensuring compliance with cybersecurity protocols
Automation Engineer — Synamedia
May 2021 – December 2022 | Scarborough, ON
-
Developed Python scripts to automate log analysis, reducing security
incident response times
-
Created automated reporting solutions to generate comprehensive
security and system health and performance reports, streamlining
workflows
-
Improved efficiency of security regression testing by automating
Python scripts, increasing test coverage by 30% and reducing manual
workload by 50%
-
Collaborated with QA teams to develop robust automation solutions,
enhancing testing accuracy and operational efficiency
Projects
Browser-based multiplayer port of The Simpsons: Hit & Run,
compiled to WebAssembly with a connected Springfield map for shared
exploration.
Technologies: WebAssembly, WebGL,
JavaScript, WebSocket
Browser-based 3D flight + dogfighting sim with streamed real-world
terrain, AI enemies, and real-time multiplayer over WebSockets.
Technologies: Three.js, WebGL, Vite,
Node.js, WebSocket (ws), 3D Tiles, JavaScript
AI social simulation platform (Twitter-like) where autonomous bots
interact in real time while humans observe. Features persistent
memory and emergent social dynamics.
Technologies: Next.js 14, TypeScript,
Tailwind CSS, tRPC, PostgreSQL + pgvector, Drizzle ORM, Redis +
BullMQ, Socket.io, Docker Compose
Full-featured fitness tracking app with workout logging, progress
analytics, training programs, and fitness calculators.
Technologies: Flutter, Dart, Hive
Modern, client-side web application for managing and editing PDF
files directly in the browser. Merge, split, reorder, and rotate
pages with live previews.
Technologies: React, TypeScript,
PDF.js, Vite, TailwindCSS, IndexedDB
Self-hosted web app for downloading videos from popular sites, with
format and quality selection powered by a yt-dlp backend.
Technologies: Python, Flask
Automated phishing simulations that transform real-world user
behavior into dynamic risk scores for targeted, high-impact security
training.
Technologies: Go, PostgreSQL, React,
Docker, SendGrid, REST API
Toyota Competition entry that aims to boost sales of Battery
Electric Vehicles (BEVs).
Technologies: React, Three.js,
TypeScript
Cybersecurity information aggregator that uses multiple threat-intel
APIs to assess and summarize risk.
Technologies: React, TypeScript,
Express.js, PostgreSQL, Drizzle ORM, TailwindCSS, WebSocket
On-Rails/Gallery wormhole 3D arcade shooter. Shoot Targets and
travel through an infinite procedurally generated tunnel.
Technologies: Three.js, WebGL,
JavaScript, GLSL Shaders
Automotive CVE Scanner that converts a vehicle's VIN (or manual
selection) into make/model/year and queries the National
Vulnerability Database (NVD) for relevant cybersecurity exposures.
Technologies: Python, Streamlit,
Pandas, Requests, NHTSA API, NVD API
A private, censorship-free, ad-free metasearch engine. Self-hosted
SearXNG with Docker Compose, Nginx reverse proxy, and custom UI.
Technologies: SearXNG, Docker, Nginx,
Valkey, Certbot, Cloudflare, Alpine Linux
Education
Bachelor of Information Technology – Cybersecurity (B.IT)
Seneca Polytechnic
Relevant Coursework: Network Security, Ethical Hacking, Python for
Cybersecurity, Incident Response
Bachelor of Science in Biological & Biomedical Sciences (B.SC)
York University — Graduated
Teaching Assistant - Biostatistics, Genetics, and Population Genetics
Developed strong communication, tutoring, and mentorship skills
through assisting students in complex scientific concepts and
statistical problem-solving
Achievements
-
NeoTokyo CodeBreaker Competition Winner —
Winner ($140,000 USD prize) in an international cryptography and
code-breaking competition
Volunteerism
President – Not Just Tourists (York University)
-
Led 100+ volunteers to deliver $200K+ in medical supplies globally,
coordinating secure logistics and distribution
-
Implemented a digital donor data management system, achieving 99%
data accuracy while ensuring donor data privacy and security best
practices
Additional Info
-
SIEM & Detection Engineering: Splunk, QRadar, Sigma, KQL/SPL
-
Endpoint & Network Security: CrowdStrike, Sysmon, OSQuery, Zeek,
Wireshark
-
Cloud Security: AWS GuardDuty, AWS Security Hub, Microsoft Sentinel,
Microsoft Defender
-
Vulnerability Management: Nessus, CIS Benchmarks, Metasploit,
Linux/Windows/Unix Hardening
- Identity & GRC: Okta, Entra ID, OneTrust, SOX
-
Frameworks & Practices: MITRE ATT&CK, NIST, Incident
Response, Threat Intelligence
-
Programming & Scripting: Python, JavaScript/TypeScript, SQL,
Bash, Java, C/C++
- Development & Data: React, Express, Pandas, R, PostgreSQL
- Cloud & DevOps: AWS, Azure, Jenkins, Git
>
This portfolio is optimized for JavaScript-enabled browsers for
the full interactive experience.
>
Enable JavaScript to access 3D visualizations, real-time data,
and interactive elements.