// curriculum vitae

Gurpreet Singh Ahluwalia

Cyber Security Engineer · Vancouver, BC, Canada

lululemon · TryHackMe Top 1% · MS Information Security

// experience

Aug 2024 – now

Cyber Security Analyst

lululemon · Vancouver, BC

SIEM operations using Splunk, IBM QRadar, and Azure Sentinel — monitoring, alert triage, and incident response
Real-time threat detection with AWS GuardDuty and Microsoft Defender; cloud security posture management
SAST/DAST vulnerability triage and remediation guidance for development teams across product lifecycle
Security tooling development in Python — automated scanners, parsers, SARIF report generators, LLM FP filtering
Log analysis and anomaly detection using rule-based engines mapped to MITRE ATT&CK and local Ollama models
IAM/PAM administration — Okta, Active Directory, AWS IAM; privilege access reviews and entitlement management
Penetration testing of network infrastructure, web applications, and APIs using Nmap, Metasploit, Burp Suite, Wireshark
Threat modelling, OWASP Top 10 review, and data security governance (DLP, classification, Microsoft Purview)

// education

2019 – 2020

Master of Science — Information Networking and Computer Security

New York Institute of Technology (NYIT)

2014 – 2018

Bachelor of Technology — Computer Science

Chandigarh Engineering College, Landran

// projects

2026

2026

STRIDE rule engine across 6 threat categories — component-aware rules for web apps, APIs, databases, caches, auth services
MITRE ATT&CK + OWASP 2021 + NIST 800-53 mapping per threat; auto-flags GDPR, PCI-DSS, SOC2, HIPAA violations
Multi-input: YAML descriptor, OpenAPI spec, Dockerfile, docker-compose, CLI wizard
Executive HTML report with Chart.js visualisations; on-prem LLM narratives via Ollama — no data egress

2026

2026

Autonomous pipeline: AFL++ coverage-guided fuzzing → ASan/GDB crash triage → LLM root cause analysis → unified diff patch → recompile + validate
Inspired by DARPA AIxCC; correctly identifies CWE-120/122 (buffer overflow) and CWE-134 (format string) with 100% patch verification rate
Pluggable LLM backend: Ollama (on-prem), Anthropic Claude, OpenAI, any OpenAI-compatible endpoint
Stack hash deduplication, binary-safe ASan output parsing, hunk-header auto-correction for LLM-generated diffs

2025–now

// skills

siem / detectionSplunk, IBM QRadar, ELK Stack, Azure Sentinel, AWS GuardDuty, Fortisiem, ArcSight, MISP, STIX/TAXII

offensive / appsecBurp Suite, OWASP ZAP, Nmap, Metasploit, Wireshark, Shodan, Nessus, Hashcat, OpenSSL, GDB/pwndbg

cloud / iamAzure Defender, Azure WAF, Azure Security Center, AWS IAM, Microsoft Defender, Okta, Active Directory, SOAR, IDS/IPS, Cisco ASA

languagesPython 3.11+, Bash, C, SQL

frameworksMITRE ATT&CK, NIST, OWASP Top 10, CWE, SARIF 2.1.0, Zero Trust, NIST CSF

infra / devKali Linux, Proxmox, Docker, Tailscale, GitHub Actions, systemd, Ollama (local LLM), Semgrep, Bandit

// certifications — earned

// certifications — roadmap