Work Experience

GdpLabsYogyakartaJul 2026 – Present

• Contributing to detection engineering efforts, building and maintaining detection-as-code pipelines for scalable, version-controlled threat detection rules.
• Monitoring and tuning SIEM platforms for real-time alerting and log analysis across enterprise environments.
• Conducting threat intelligence research and proactive threat hunting to identify emerging attack patterns.

Widya SecurityYogyakartaMar 2026 – Jun 2026

• Conducted penetration testing on web applications, mobile applications (Android & iOS), and servers.
• Performed security testing using rooted Android and jailbroken iOS devices to identify mobile vulnerabilities.
• Assisted in patch management activities and provided recommendations to improve system security
• Collaborated with clients to validate security fixes by performing retesting after patches were implemented.

GdpLabsYogyakartaJan 2026 – Mar 2026

• Deployed and configured Tracecat as a SOAR platform, building automated playbooks for incident triage and response across Windows, macOS, and Linux endpoints monitored by Wazuh SIEM, and submitting bug reports and feature requests, actively participating in community-driven development.
• Integrated Wazuh alerts with Tracecat workflows to automate threat detection and enrichment, reducing mean time to respond (MTTR) to security incidents.
• Developed case management workflows in Tracecat to streamline threat hunting, alert correlation, and analyst assignment, improving SOC operational efficiency.

GdpLabsYogyakartaJul 2025 – Dec 2025

• Designed and deployed an automated vulnerability assessment system using open-source frameworks, streamlining reconnaissance and security testing across 1000+ web applications.
• Developed custom scanning workflows integrating multiple tools to detect vulnerabilities aligned with OWASP Top 10, improving testing efficiency by 70%.
• Conducted security assessments that identified 7 critical vulnerabilities and delivered validated remediation recommendations.
• Integrated MCP (Model Context Protocol) with LLM to enhance automated vulnerability triage and accelerate security analysis.

GdpLabsYogyakartaDec 2024 – Mar 2025

• Implemented SIEM (Wazuh) for real-time log monitoring, configuring rules and dashboards across 4 systems.
• Evaluated secret-management platforms to strengthen credential handling and API key protection, reducing exposure risk by 80%.
• Built and deployed SOAR workflows to automate incident handling, improving SOC response time by 90%.

PT Digital Forensic AnalystYogyakartaSep 2024 – Nov 2024

• Performed forensic acquisition and analysis using industry-standard methodologies.
• Analyzed Dark Web activities and server logs to detect suspicious behavior and trace malicious actions.
• Documented forensic findings and supported investigative reporting.

Yogyakarta State UniversityYogyakarta, IndonesiaJan 2024 – Dec 2024

• Implemented Wazuh SIEM across 20 university servers to enhance real-time threat visibility.
• Conducted penetration testing on critical academic systems to reduce security risks and strengthen data protection.
• Validated vulnerability reports from bug hunters, ensuring accuracy before escalation.