01
Offensive & Defensive Security
Penetration testing, threat intelligence, vulnerability management.
01 / About
About
Cybersecurity engineer with cross-border experience in Indonesia and Singapore, and an active trainer for PANDI's .id Academy since 2024.
My work sits at the intersection of internet governance and DNS ecosystem security: phishing and DNS abuse mitigation on the operational side, digital literacy and safe .id adoption on the community side.
Founder of Cyber Nova, a Batam-based security startup.
Completed PANDI's Training of Trainer on DNS and DNSSEC and took part in DNS APAC 2024.
02 / Experience
Experience
-
Jul 2025 – Present
Founder & CEO
Cyber Nova · Batam
- Security startup: vulnerability assessment, threat intelligence, digital defense architecture.
- Leads cross-functional technical teams and promotes local cyber talent.
-
Jul 2024 – Present
Security Engineer
Constellar · Singapore (hybrid)
- Security assessments and vulnerability scans.
- Alert and incident monitoring and response.
- Phishing simulation campaigns.
- Security reporting for stakeholders across a multicultural organization.
-
Jul 2023 – Jul 2024
Kampus Merdeka Mentor, Red Hat & AI
PT Kinema Systrans Multimedia (Infinite Learning) · Batam
- Mentored students nationwide to RHCSA (EX200) and AI & Cybersecurity Practitioner certification.
-
Oct – Dec 2022
Junior Cyber Security / IT Support
PT Schneider Electric · Batam
- Production endpoint security (SCCM, Cylance, SentinelOne).
- Network monitoring and incident documentation.
03 / Training & Speaking
Training & Speaking
2,000+
learners reached
6+
institutions & programs
2
countries (ID & SG)
-
2024 – Present
.id Academy (PANDI)
Active Trainer
Digital literacy and internet governance bootcamps: UNIMA (Manado, eastern Indonesia) and ITEBA (Batam).
-
Nusa Dua, Bali · Jul 2024
PANDI Training of Trainer
DNS Fundamentals to DNSSEC
Instructors including Champika Wijayatunga (ICANN). Participant, DNS APAC 2024.
-
Jul – Oct 2025
Hundreds of learners
Google Cloud Arcade (via Dicoding)
Facilitator
Hundreds of learners across cloud and cloud security pathways.
-
Nov 2024
DTS × Google Career Certificates (Kominfo)
Cybersecurity PROA Facilitator
National digital talent scholarship program facilitation.
-
Jun 2025
100+ attendees
Hacktiv8
Speaker — "Phishing 101: Don't Be a Victim!"
Practical anti-phishing session for a developer audience.
-
2025
400+ attendees
Schoters by Ruangguru, Work Abroad Festival 2025
Panelist — "Hack the Future: Building a Cybersecurity Career in Singapore"
Career panel on building a cybersecurity career across borders.
04 / What I Do
What I Do
02
DNS & Internet Governance
DNS abuse mitigation, DNSSEC, safe .id adoption, multistakeholder engagement.
03
Training & Community
Curriculum design, workshops and bootcamps from campus to industry.
05 / Certifications
Certifications
- CEH v12 EC-Council · 2024
- CTIA EC-Council · 2024
- RHCSA Red Hat · 2023
- Cisco CyberOps Associate Cisco · 2022
- Digital Forensic Professional Academy (90h) Kominfo · 2022
- SMTP 2025 KISIA & Korean Ministry of Science and ICT · 2025
06 / Writing
Writing
-
Jun 3, 2026
Medium ↗
I Built an AI-Powered SOC With Tools We Already Owned. Here's the Honest Version.
An honest write-up of building an AI-assisted SOC at Constellar with tools we already owned: what worked, what did not, and what I would do differently.
-
Mar 17, 2026
Medium ↗
Running a Tabletop Exercise Across the Entire Organisation: A Constellar Story
What we learned about pressure, process, and people when the whole company sat down to face a simulated ransomware crisis together.
-
Feb 23, 2026
Medium ↗
The Hidden Attack Surface: PDF Metadata & Information Leakage
What your PDFs reveal about your infrastructure, and how to stop that reconnaissance in C# and .NET.
-
Feb 21, 2026
Medium ↗
How I Stopped Manually Reading Email Headers and Built a Phishing Analyzer That Does It For Me
A Mini-SOC automation pipeline with Microsoft Power Automate, KnowBe4 PhishER, and Freshservice that cut phishing triage from minutes per ticket to under thirty seconds.
-
Sep 16, 2025
Medium ↗
From Pixels to Privacy: Using OCR + Microsoft Presidio to Redact Sensitive Data in ID Cards
A hands-on guide to detecting and redacting sensitive data like NIK and NRIC from ID cards with Tesseract OCR and Microsoft Presidio, with code and results.
-
Aug 13, 2025
Medium ↗
From Pixels to Pinpoints: My Journey into OSINT Geolocation
Notes from an OSINT geolocation lecture in the SMT program: how image metadata and open map data turn pixels into precise locations, and the ethics that come with it.
07 / Contact
Contact
Open to speaking invitations, training collaborations, and security engineering opportunities.