Cybersecurity Engineering & Data Infrastructure

Karan Chawla

I'm an engineer working the seam between engineering and the customer - building the security data pipelines and detection systems behind enterprise deployments, then running the POCs and simulation environments that prove they work.

Based in Los Angeles, CA Open to Software Engineer, Forward Deployed Engineer, Solutions Engineer Where California, Washington, New York, New Jersey, Florida, Texas and Remote Focus POCs · Data Pipelines · Customer-Facing Demos · Software Engineering
Karan Chawla
Scroll
0+
Production security pipelines built
0+
Security use cases automated for live simulations
0+
POCs, workshops, CTFs, and simulations led
0+
Telemetry sources normalized into one platform
0+
Technical articles published
About

Building at the edge of security and AI

I'm a cybersecurity engineer based in Los Angeles, building data infrastructure for security products. At Gurucul, I design and run the production pipelines that move customer logs into a SIEM, own the simulation environments behind enterprise demos, and work directly with customers to run POCs and workshops.

What makes that work is the engineering underneath it - I build the production data pipelines and detection use cases myself, so when a prospect asks a hard technical question in the room, I can answer it, or go change the platform to prove it.

Before Gurucul, I completed my Master's in Computer Science at USC, where I built ML pipelines for user behavior analytics. I'm now looking at Forward Deployed Engineer, Solutions Engineer, and Software Engineer roles where that same mix - hands-on build plus customer-facing delivery - is the job.

Based inLos Angeles, CA
CurrentlyCybersecurity Engineer, Gurucul
EducationMS Computer Science, USC
Open toSoftware Engineer, Forward Deployed Engineer, Solutions Engineer
LocationsCalifornia, Washington, New York, New Jersey, Florida, Texas and Remote
ElsewhereLinkedIn · GitHub
Experience

Where I've worked

Feb 2025 - Present
Gurucul Solutions, LLC
El Segundo, CA
Cybersecurity Engineer
  • Led 35+ POCs, workshops, CTFs, and simulations with Solutions Architects, presenting to CISOs and security teams.
  • Built 30+ production security data pipelines with Logstash, ingesting multi-terabyte data and 20M+ security events per day.
  • Cut customer data onboarding from 1 week to 1 day using Webhooks, Syslog collectors, REST APIs, and HTTPS forwarding.
  • Built Logstash pipelines to monitor AI agent usage, parsing OpenTelemetry-format Claude Code, Cowork, and usage metrics to detect AI risk and insider threats and monitor per-user costs.
  • Own 5+ SIEM simulation environments end to end. Automated daily ingestion of 30+ use cases that drive detections, AI SOC triage, and incidents with zero manual work, keeping demos available to Sales worldwide.
  • Improved syslog collector deployment and validation across RHEL, Rocky Linux, Ubuntu, and Oracle Linux by handling firewall, SELinux, and SSL hardening, cutting deployment time by 60%.
  • Mentor and train engineers to run backend platform version upgrades, debug Kafka streaming topics and ClickHouse storage issues, and maintain production customer environments.
  • Authored 9+ technical articles on YARA rules, insider threat, and AI risk case studies for the Gurucul blog.
Aug 2024 - Feb 2025
University of Southern California
Los Angeles, CA
Data Engineer - User Behavior Analytics
  • Built a Python user behavior analytics pipeline that generated 30K+ events across login, logout, file access, email, and data upload actions.
  • Engineered per-user behavioral features (hour of day, day of week, action mix) with Pandas and trained a Scikit-learn Isolation Forest to flag the most anomalous 5% of users as insider-threat candidates.
  • Trained a Logistic Regression classifier on flagged and normal users and built a Plotly Dash dashboard of flagged activity.
Education

Where I studied

University of Southern California
Master of Science - Computer Science
Los Angeles, CAAug 2022 – May 2024
Mentored students in Information Retrieval & Web Search Engines and Data Science coursework.
University of Mumbai
Bachelor of Engineering - Computer Engineering
Mumbai, IndiaAug 2018 – May 2022
Skills

Tools I work with

Languages
PythonCC++Bash SQLJavaJavaScript TypeScript
Security
SIEMUEBAIRM ITDREDRSOAR MITRE ATT&CKYARASysmon OktaEntra ID
Data & Streaming
KafkaLogstashOpenTelemetrySpark HadoopClickHouseCrateDBCribl
Databases
PostgreSQLMySQLMongoDB Snowflake
Cloud & Infra
AzureAWSGCP Docker
Linux
RHELRocky LinuxUbuntu Oracle LinuxSELinuxsystemd firewalld
ML
Scikit-learnPandasIsolation Forest Logistic RegressionNumPy
AI Tools
Claude CodeCoworkOpenAI Codex
Writing

Published Blogs

Contact

Let's work together

Open to Software Engineer, Forward Deployed Engineer, and Solutions Engineer roles - California, Washington, New York, New Jersey, Florida, Texas and Remote.