Background.

Whitesec ID (PT Topi Putih Siberindo)

Helping organizations strengthen cybersecurity posture through governance, risk management, compliance initiatives, and technical security assessments. Building audit-ready security programs while validating controls through practical testing.

• ·Delivered 24+ security engagements across GRC and VAPT disciplines
• ·Lead Auditor certified in ISO/IEC 27001:2022, ISO/IEC 27701, and ISO/IEC 42001
• ·Conducted web application and mobile penetration testing across technology, finance, and healthcare sectors
• ·Developed ISMS documentation — risk registers, SoA, security policies — mapped to annex A and UU PDP
• ·Supported clients through ISO 27001 initial certification and surveillance audit cycles

Defenxor (PT Defender Nusa Semesta)

Worked on security monitoring and security operations initiatives, supporting the deployment and optimization of enterprise SIEM environments for client organizations.

• ·Deployed and tuned Wazuh SIEM with ELK Stack for enterprise client environments
• ·Authored custom threat detection rules across Linux and Windows endpoint telemetry
• ·Performed log analysis and alert triage to support client SOC teams
• ·Contributed to internal tooling for incident response and event correlation workflows

Faculty of Mathematics and Natural Sciences, University of Indonesia

Supported endpoint management and infrastructure operations within the university laboratory environment.

• ·Managed Windows and Microsoft 365 lifecycle across laboratory workstations
• ·Assisted in network deployment, cabling, and switch configuration
• ·Maintained IT asset inventory and operational documentation