I’m Harwinder Sandhu. I lead a security automation team, and this site is where I write about what I’m building and learning.

What I work on

  • Security automation and SOAR with Palo Alto Cortex XSOAR
  • Agentic AI for security operations
  • Detection content and threat hunting in Splunk and Elastic
  • AWS security: automated remediation with Lambda, built with Terraform and CloudFormation
  • Growing engineers through hiring, co-op programs and career development

Certifications 🎓

  • Check Point Certified Security Expert (CCSE)
  • Check Point Certified Security Administrator (CCSA)