Experience

• 

  Hackerone

  Jan 2020 - now

  Bug bounty hunter

  Bug Bounty Awarded – Meta, Netflix, TikTok, Coinbase, Web3, etc.

• 

  Bangkit academy led by google, tokopedia, gojek, & traveloka

  Aug 2023 - Jan 2024

  Cloud computing

  • Learning about cloud computing and frontend/backend development• Implementing back-end and the Google Cloud Platform resources for machine learning integrated mobile application• Actively join the program's various instructor-led sessions and self-paced courses ahead of the schedule• Improving soft skills and English abilities through the classes provided

• 

  Kalla aspal

  Oct 2023 - Nov 2023

  Penetration tester

  • Creating audit reports for the vulnerabilities that have been identified.• Implementing OWASP TOP 10 according to mobile application security standards.• Responsible for Vulnerability Assessment and Penetration Testing (VAPT).

• 

  Baparekraf digital talent

  Feb 2024 - Jul 2024

  Web developer

  • Learning about front-end and back-end development• Implementing front-end and back-end to project capstone• Actively join the program's various instructor-led sessions and self-paced courses ahead of the schedule• Improving soft skills and English abilities through the classes provided

• 

  Pt krakatau information technology

  Oct 2024 - Nov 2024

  It infrastructure

  • Implemented monitoring and threat detection using Wazuh, Suricata, and SIEM tools.• Performed adversary simulation and security validation with MITRE Caldera.• Supported secure network design, hardening, and incident response activities.• Conducted troubleshooting, log analysis, and issue resolution across critical systems.

• 

  Confidential

  Sept 2025 - now

  Penetration tester

  • Conducted comprehensive Vulnerability Assessment & Penetration Testing (VAPT) across 110+ unique targets, including securities companies, financial services, cloud portals, and enterprise systems.• Performed Vulnerability Assessment and Penetration Testing (VAPT) on web applications, Android/iOS mobile apps, remote access VPNs, and desktop applications using SAST & DAST methodologies and internal automated tools.• Utilized the internal Technical Compliance Report (TCR) system to generate structured, standardized, and compliance-aligned vulnerability reports, ensuring consistency and accuracy across all targets.• Identified, validated, and exploited vulnerabilities following OWASP Web & Mobile Testing Guide and PTES, delivering insights aligned with industry best practices.• Produced detailed technical reports summarizing, reproduce, impact, and remediation.• Collaborated with teams to support remediation, retesting, and continuous security improvement.• Utilized tools such as Burp Suite, Nmap, Nessus, Frida, Metasploit, ProjectDiscovery utilities, and internal platforms to deliver accurate and comprehensive security testing. Show less