Security Operations & Automation
SOC analyst and automation engineer in Jakarta. I wire XDR, SIEM, and threat intelligence into self-driving incident response.
Currently: Security Operations Associate Analyst at PT. Bank Sinarmas
n8n / Splunk / Wazuh / Cynet XDR / Recorded Future / Zscaler / Python
Blue-team work end to end: threat analysis, detection tuning, and incident handling across XDR, SIEM, VPN, and endpoint fleets for a national bank. Certified Blue Team Practitioner.
n8n pipelines and Python middleware that block malicious IPs, close confirmed alerts, and page analysts on Telegram before a human opens a dashboard.
Connected hardware from sensor to dashboard. My university project PATRIOT automated an entire broiler farm and was covered by regional press.
Deployed an automated threat response system in n8n that instantly blocks malicious IPs and domains across XDR, VPN, and firewall platforms. Hardened endpoints with Zscaler strict enforcement, automated LDAP account lifecycle, and tuned XDR detections to cut false positives for the SOC.
Ran threat intelligence on Recorded Future and engineered its API into the alert pipeline, adding reputation checks for hashes, IPs, and URLs. Produced security advisories that put actionable intel in front of stakeholders.
Handled SIEM incidents around the clock and built the tooling to do it faster: Cynet 360 AutoXDR response, a Wazuh deployment with active response, and Splunk integrations that pushed every critical alert straight to Telegram.
SOC Automation Suite
A Python and n8n pipeline connecting Cynet XDR, Splunk, AbuseIPDB, and Recorded Future to Telegram. Alerts arrive enriched with IP and hash reputation. Analysts close alerts or delete infected files with a single command, on call, from anywhere, at any hour.
Bot commands the team uses daily
PATRIOT, IoT Farm System
My Computer Engineering capstone: an MQTT-based system that feeds broiler chickens automatically by age and growth stage while streaming cage temperature, humidity, and ammonia levels to the farmer's phone. Covered by East Java's communications agency and regional news.
Scheduled pipeline that reads confirmed IOCs, separates IPs from domains, pushes them into firewall block groups through the Panorama API, then commits the config and writes every block back to a daily ledger.
Mirrors the same confirmed IOCs into Zscaler so blocks follow users off-network, with duplicate detection before every push.
Matches alert hostnames against the whole endpoint fleet, fires forensic triage acquisitions on affected machines, and records completion status without an analyst touching the console.
Automated LDAP account lifecycle management: queries Active Directory OUs and security groups, excludes disabled accounts, and exports a clean membership audit for IAM review.
Zscaler Zero Trust Cyber Associate
Zscaler Digital Transformation Administrator
AlgoSec ASMS Foundations Technical Training
The Basics of Google Cloud Compute
Certified Blue Team Practitioner
Certified Social Engineering Defense Practitioner
Fortinet FortiGate 7.4 Operator
Fortinet Certified Associate Cybersecurity
Fortinet Certified Fundamentals Cybersecurity
Getting Started in Cybersecurity 2.0
Introduction to the Threat Landscape 2.0
ISC2 Candidate
OPSWAT Critical Infrastructure Protection
Cybersecurity Essentials
Microsoft Azure Data Fundamentals
Microsoft Power Platform Fundamentals
Security, Compliance & Identity Fundamentals
MikroTik Certified Network Associate
Microsoft Azure Fundamentals
CCNA: Introduction to Networks
B.Eng. Computer Engineering, Universitas Dinamika, Surabaya. GPA 3.46 (transcript). See all badges on Credly
Open to security automation projects, SOC consulting, and IoT builds.