Skip to content
SE

Based in Indonesia

Software Engineer

Full-Stack Development · AI · Application Security

Informatics Engineering graduate with hands-on experience building enterprise, backend, and full-stack applications, with additional experience in AI and application security.

View ProjectsView CVGitHubLinkedInContact

Specialization

What I build with

Select a focus to highlight related experience and projects. One portfolio, three lenses.

01. Software Engineering

  • Full-stack development
  • Frontend development
  • Backend development
  • REST APIs
  • Authentication and authorization
  • Database-driven applications
  • Enterprise applications
  • Deployment and production support

About

Building production software systems

Software Engineering first. AI and application security as supporting depth.

Informatics Engineering graduate from Multimedia Nusantara University (GPA 3.63 / 4.00) with hands-on experience across frontend, backend, and full-stack development.

Currently building and maintaining enterprise HRIS applications, with prior backend engineering work on large REST API surfaces and a background in AI and application security.

Focused on reliable, secure, and scalable software systems, shipping production software end to end.

Education
Bachelor of Informatics Engineering
Multimedia Nusantara University
GPA
3.63 / 4.00
Focus
Reliable, secure, and scalable software systems

Experience

Professional experience

Enterprise engineering first, with supporting security and teaching roles.

  1. Front-End Developer, HRIS Team

    Current

    PT. Sigma Cipta Caraka (TelkomSigma)

    • Owned development and maintenance of 5 internal HRIS enterprise applications
    • Built with Nuxt.js 2 & 3, Laravel, CodeIgniter, and PHP
    • Implemented authentication, access control, and secure data flow
    • Handled testing, debugging, documentation, and production deployment
    • Collaborated cross-functionally with product and engineering teams
    • Speaker for internal training delivered to other business units at TelkomSigma (August 2026)

  2. Full-Stack Developer

    Current

    Freelance Web Developer

    • Delivered custom web applications and websites for multiple clients
    • Built a full-stack cosmetic e-commerce platform with admin and user CRUD flows (Edelweyss Official)
    • Handled frontend and backend development with database design
    • Built authentication flows and administrative dashboards
    • Managed deployment, hosting, and post-deployment support
    • Led requirement gathering and client communication

  3. Website Contributor

    Current

    Wo-Men In Tech Security (WTS)

    • Developed and managed the organization's official web profile
    • Handled end-to-end website maintenance, feature updates, and platform administration

  4. Back-End Developer, HRIS Team

    PT. Sigma Cipta Caraka (TelkomSigma)

    • Engineered 56+ RESTful API endpoints for Employee Management, Authentication, and Internal Services
    • Built with Python / Django and Oracle Database
    • Implemented request validation, authentication middleware, and access control
    • Produced OpenAPI Specifications and collaborated via GitLab

  5. IT Security, Risk Management

    Astra Credit Companies

    • Security documentation and compliance aligned with CIS, NIST, and ISO 27001
    • Penetration testing with Burp Suite and vulnerability analysis
    • Threat monitoring and incident response support

  6. Coding Teacher

    Current

    Timedoor Academy

    • Taught HTML, CSS, JavaScript, and Python to 35+ students per week
    • Instructed in English and Bahasa Indonesia

Projects

Selected work

Systems that demonstrate engineering depth: full-stack product work and research-grade security tooling.

Software Eng.

Edelweyss Official

Full-stack cosmetic e-commerce website with admin and user CRUD workflows

  • Full-stack web application for a skincare brand
  • Admin and user-facing flows with CRUD capabilities
  • Product catalog, content, and operational management support
  • Deployed production site for client use
Live Demo
Software Eng.Security

Wo-Men In Tech Security (WTS)

Official web profile for a nonprofit cybersecurity community organization

  • Developed and managed the organization's official web profile
  • End-to-end website maintenance and feature updates
  • Platform administration for the community organization
Live Demo
Software Eng.AI

MelodyLingo

AI Language Learning Application

  • AI-powered language learning full-stack application
  • Authentication and real-time data handling
  • Interactive quizzes and progress tracking
  • Generative AI integration with deployment on Vercel
  • Next.js
  • Vue.js
  • Supabase
  • Gemini AI
  • Vercel
Live Demo
AISecuritySoftware Eng.

BYEBAC

AI agent for automated Broken Access Control detection in REST API endpoints

  • LLM-powered vulnerability detection agent
  • REST API endpoint testing for IDOR and BOLA
  • Automated application security testing
Accuracy
88.1%
Precision
100%
Speedup
147×
False positives
0 / 28 critical endpoints

Under Review, PeerJ Computer Science, 2026

  • AI Agents
  • LLMs
  • REST API Testing
  • Application Security
Code

Hackathons & Competitions

Building under competition constraints

Engineering-first participation: shipping working software and AI components, not only pitches.

Featured engineering work

BPJS Healthkathon 2026

NADI

Full-Stack Developer & AI Designer

Claim Forensics · Software Engineering · AI System Design

  • Software Engineering
  • AI
  • Healthcare
  • Hackathon
Live Demo

My Contribution

Hands-on technical ownership across software engineering and AI system design, not limited to ideation or presentation.

  • Built the full-stack web application for NADI Claim Forensics
  • Designed and implemented the application's frontend
  • Developed the backend and API functionality
  • Designed the overall application architecture
  • Designed the AI component/workflow
  • Integrated AI into the application
  • Connected the AI workflow with the application's backend/system
  • Translated the problem statement into a working technical solution

Harvard Health Systems Innovation Lab Hackathon

Node.Cardio

Participant, Team Node.Cardio

AI · Healthcare Systems

  • AI
  • Healthcare
  • Hackathon

Samsung Innovation Campus

Global Preliminary

Participant

Innovation · Technology Education

  • AI
  • Innovation
  • Competition

Security Research

Application security in practice

Responsible disclosure and vulnerability research supporting a cybersecurity career path.

Application SecurityBug BountyHackerOne

Vulnerability Disclosure Submissions

HackerOne

Submitted security findings through HackerOne across multiple vulnerability classes.

  • Information Exposure Through Directory Listing (CWE-548), 1 submission
  • Missing Authentication for Critical Function (CWE-306), 1 submission
  • Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497), 1 submission

HackerOne experience by vulnerability type

HackerOne experience by vulnerability type
Application SecurityResponsible DisclosureGovernment

Exposed API Key Finding

CSIRT Jakarta

Reported an exposed API key vulnerability on a government website. The finding was validated by CSIRT Jakarta after review.

  • Identified exposed API keys on a government web application
  • Submitted a vulnerability report to CSIRT Jakarta
  • Finding validated as VALID by CSIRT Jakarta (Diskominfotik Provinsi Jakarta)
  • Recognized for contributing to cybersecurity in the Jakarta province region

CSIRT Jakarta validation notice

CSIRT Jakarta validation notice

Skills

Technical skills

Prioritized for Software Engineering roles. Supporting AI and security capabilities listed separately.

Primary

Core engineering stack
  • JavaScript
  • TypeScript
  • Vue.js
  • Nuxt.js
  • React
  • Next.js
  • PHP
  • Laravel
  • Python
  • Django
  • Node.js
  • REST APIs
  • SQL
  • Git
  • Linux

Databases

Data layer
  • MySQL
  • Oracle Database
  • Supabase
  • Firebase

AI

Supporting specialization
  • Generative AI
  • Gemini
  • Machine Learning
  • Deep Learning
  • Azure AI

Security

Supporting specialization
  • Application Security
  • Penetration Testing
  • Burp Suite
  • Authentication
  • Authorization / Access Control
  • NIST
  • CIS
  • ISO 27001

Education

Academic background

Multimedia Nusantara University

Bachelor of Informatics Engineering

GPA: 3.63 / 4.00

Thesis

Development of an AI Agent-Based Tool For Broken Access Control Vulnerability Detection Through Endpoint Testing Automation in Back-End Applications

Continuing education

The Open University / OpenLearn

OpenLearn learner profile for continuing education and free learning courses.

View profile

Publication

Research publication

Peer-reviewed research connecting AI agents with application security testing.

Under Review, PeerJ Computer Science, 2026

Automated Detection of Broken Access Control in REST API Endpoints Using AI-Based Testing Agents

Research on AI agent-based automated testing for Broken Access Control vulnerabilities in REST API endpoints, evaluating detection accuracy, precision, and execution efficiency against manual approaches.

Certifications

Credentials

  • Microsoft Certified: Azure AI Fundamentals

    Microsoft / Certiport

    Date issued: September 30, 2025. Certiport verification code: ca8u-uScT.

    Verify credentialView certificate PDF

  • HCIA Artificial Intelligence

    Huawei

  • Ethical Hacker

    Cisco Networking Academy

    Verify credential

  • Outstanding Contributor Award

    Wo-Men in Tech Security (WTS)

    Recognized as Outstanding Contributor / volunteer Graphic Designer for WTS 2025/2026. Presented at WTS Impact Summit 2026, Jakarta.

    WTS Outstanding Contributor certificate

Opportunities

Open to Software Engineering and Security roles

Interested in international product, engineering, and application security teams.

Actively exploring Software Engineer and Application Security roles across Germany, the Netherlands, Ireland, and Australia, and open to strong remote or hybrid international teams.

  • Software Engineer
  • Full-Stack Engineer
  • Backend Engineer
  • Frontend Engineer
  • Application Security Engineer
  • Security Engineer

Contact

Let's talk

For Software Engineer / Full-Stack opportunities, reach out via LinkedIn, GitHub, or email.

LinkedInGitHubEmailDownload CVOpenLearn

Open to Software Engineer and Full-Stack roles with international teams in Germany, the Netherlands, Ireland, and Australia.