HSQuality Inspector

Aspiring engineer focused on practical IoT security experience

I practice hands-on IoT security, learning to attack and defend devices so I can move confidently into professional work.

View my work Message Me

Work samples

Projects include hands-on exercises against realistic IoT infrastructure, performing attacks like spoofing and replay and implementing defenses such as TLS and mTLS.

Hydroficient IoT Cyber Defense Externship
Hydroficient · Apr 2026 · ✅ Verified by Extern
Hydroficient IoT Cyber Defense Externship
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
Top performerPython ProgrammingData AnalysisThreat ModelingDashboard Development

About me

I practice hands-on IoT security, learning to attack and defend devices so I can move confidently into professional work.

I am Harminder Singh, with a bachelor's degree and some practical experience. I am working to build confidence in applying skills to real-world engineering and security challenges as I move from learning to a career.

Externships

Hydroficient IoT Cyber Defense Externship

Completed · Apr 2026

Experience

Quality Inspector

Oliver Healthcare Packaging · 2021–Present

AI Data Annotation Specialist

Handshake AI (Remote) · 2026

Founder / AI Product Builder

Nexora AI · 2026

Founder / AI Product Builder

Omni AI · 2026

Freelance Web Developer & IT Support

Risen PCs · 2016–2018

Web Developer / IT Support

FireStarter Group · 2015–2016

Line Attendant

Estée Lauder · 2010–2015

Education

The Pennsylvania State University

B.S., Information Sciences and Technology

Google

Google IT Support Professional Certificate

Skills

IoT security testingSpoofing and replay attack techniquesImplementing TLS and mTLSPractical cyber defenseHands-on infrastructure debugging

Back to work

Hydroficient · Apr 2026 ↗

✅ Verified by Extern

Hydroficient IoT Cyber Defense Externship

Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.

Python ProgrammingData AnalysisThreat ModelingDashboard Development

Overview

The work analyzed a hotel water-monitoring IoT system, produced a STRIDE-based threat model with ranked risks and mitigations, implemented and measured layered defenses (TLS, mTLS, HMAC, timestamps, sequence counters), and delivered a live dashboard and experiments documenting attack coverage. The work was awarded Top Performer by Hydroficient.

Hydroficient IoT Cyber Defense Externship

Open Link

What I've accomplished

I produced a professional threat model, implemented a secured MQTT pipeline with mTLS and replay protections, ran experiments measuring latency and protection, built a real-time security dashboard, and integrated an Isolation Forest anomaly detector.

Top performer

Project breakdown

View all work

Work samples

Hydroficient IoT Cyber Defense Externship

About me

Hydroficient IoT Cyber Defense Externship

Overview

What I've accomplished

Project breakdown

Understanding IoT Systems & Threat ModelingI created a professional STRIDE-based threat model for the HYDROLOGIC water management system at The Grand Marina.

Learning Python for IoT SecurityI wrote a Python sensor log generator and produced a JSON file of simulated water-sensor readings with anomalies and counters.

Building an Insecure MQTT PipelineI built an end-to-end insecure MQTT pipeline and demonstrated how unencrypted, unauthenticated traffic can be intercepted.

Securing the Pipeline & Measuring the CostI wrote a concise security assessment report and measured TLS effects on the hotel's MQTT pipeline.

Enforcing Device Identity & ProvisioningI documented why one-way TLS left the broker open to any device with the CA certificate and identified the specific configuration gaps that allowed unauthorized connections.

Defeating Replay AttacksI ran experiments comparing timestamp checks, sequence counters, and HMAC signing, then wrote a defense comparison report recommending a combined deployment.

Building a Real-Time Security DashboardI built and presented a final IoT security capstone presentation that documented the defended pipeline, experiments, and dashboard results.