Work Experience
Professional roles and key contributions
Information Security Engineer Intern
InternshipGdpLabsYogyakartaJan 2026 – Mar 2026
- Deployed and configured Tracecat as a SOAR platform, building automated playbooks for incident triage and response across Windows, macOS, and Linux endpoints monitored by Wazuh SIEM, and submitting bug reports and feature requests, actively participating in community-driven development.
- Integrated Wazuh alerts with Tracecat workflows to automate threat detection and enrichment, reducing mean time to respond (MTTR) to security incidents.
- Developed case management workflows in Tracecat to streamline threat hunting, alert correlation, and analyst assignment, improving SOC operational efficiency.
Information Security Engineer Intern
InternshipGdpLabsYogyakartaJul 2025 – Dec 2025
- Designed and deployed an automated vulnerability assessment system using open-source frameworks, streamlining reconnaissance and security testing across 1000+ web applications.
- Developed custom scanning workflows integrating multiple tools to detect vulnerabilities aligned with OWASP Top 10, improving testing efficiency by 70%.
- Conducted security assessments that identified 7 critical vulnerabilities and delivered validated remediation recommendations.
- Integrated MCP (Model Context Protocol) with LLM to enhance automated vulnerability triage and accelerate security analysis.
Information Security Engineer Intern
InternshipGdpLabsYogyakartaDec 2024 – Mar 2025
- Implemented SIEM (Wazuh) for real-time log monitoring, configuring rules and dashboards across 4 systems.
- Evaluated secret-management platforms to strengthen credential handling and API key protection, reducing exposure risk by 80%.
- Built and deployed SOAR workflows to automate incident handling, improving SOC response time by 90%.
Digital Forensics & Web Security (MSIB)
MSIBPT Digital Forensic AnalystYogyakartaSep 2024 – Nov 2024
- Performed forensic acquisition and analysis using industry-standard methodologies.
- Analyzed Dark Web activities and server logs to detect suspicious behavior and trace malicious actions.
- Documented forensic findings and supported investigative reporting.
CSIRT Coordinator
Part-timeYogyakarta State UniversityYogyakarta, IndonesiaJan 2024 – Dec 2024
- Implemented Wazuh SIEM across 20 university servers to enhance real-time threat visibility.
- Conducted penetration testing on critical academic systems to reduce security risks and strengthen data protection.
- Validated vulnerability reports from bug hunters, ensuring accuracy before escalation.