Information Technology student · Medan, Indonesia

Building secure, well-crafted applications, one project at a time.

I'm working toward becoming a security consultant, and I believe that starts with understanding how things are built. So I develop, break, and secure applications from the backend up, currently exploring the Apple ecosystem and Swift as a new frontier.

Backend Developer Penetration Tester Laravel · PHP Aspiring Security Consultant
About

I'm an Information Technology student with a growing passion for building secure, thoughtful, and well-crafted applications. My long-term goal is to become a security consultant, and I believe that understanding security starts with understanding how things are built. That's why I'm eager to explore app development from the developer's perspective, strengthening both sides of my understanding.

I've had a small taste of that mindset through projects like the ITLG Lab Management System, where I worked on the backend architecture and implemented authentication and access control. That experience showed me how closely good development and good security go hand in hand.

I learn best by doing, asking questions, and working closely with others. I'm genuinely excited to keep growing as a developer, contribute to the community, and stay curious about what I can learn next.

Selected work

7 projects
Cover graphic for the ERP system prototype for Toko Aini Seragam Sekolah ↗ Figma

Business Analyst & Prototype Designer

ERP Prototype: Toko Aini Seragam Sekolah

Analyzed sales, inventory, finance, and HR processes at a 15-year manual uniform retailer, then prototyped Inventory, Admin, and Employee modules with real-time stock sync and role-based access. Final grade: B+.

FigmaBusiness analysisERP design
ITLG Lab Management System dashboard showing four lab room statuses and a weekly schedule table ↗ Live site

Backend Developer

ITLG Lab Management System

Laboratory management platform for the IT Laboratory Group: JWT auth, role-based access for three user roles, and a QR-based attendance system with real-time monitoring.

LaravelREST APIJWTPostgreSQL
Executive summary page of the Merdeka Siber penetration testing report listing security findings and severity levels ↗ Report

Penetration Tester

Report for Merdeka Siber's Lab

Penetration test on a simulated web app using Burp Suite with 8 documented vulnerabilities including Open Redirect, IDOR, and Unrestricted File Upload, with CVSS 3.1-scored mitigations.

Burp SuiteOWASPCVSS 3.1
Cover graphic for the Azeroth Property Management WordPress project ↗ Live site

Freelance WordPress Developer · Feb – Jun 2026

Azeroth Property Management

Custom WordPress property management system built over 4 months for a real client, from architecture and content structure through deployment, with positive feedback on the final result.

WordPressCustom themePHPClient project
Homepage of the Go Campus semantic web search engine for Indonesian universities Project page

Backend Developer

Go Campus

Semantic web-based search engine for universities across Indonesia, modeled in Protégé with an RDF dataset. Earned an A grade in the Semantic Web course.

ProtégéRDFLaravelPHP
Landing page of AmbiVerse, an exam preparation platform for Indonesian university entrance tests Project page

Backend Developer

AmbiVerse

All-in-one learning and tryout platform for high school students preparing for Indonesia's UTBK/SNBT exams. Winner, Best Final Project: HIMATIF x ITLG 2022.

PHPLaravelMySQLJavaScript
Landing page of Pandhu, a travel discovery platform inspired by TripAdvisor Project page

Fullstack Developer

Pandhu: Trip Helper

TripAdvisor-inspired travel discovery platform with a full CMS for attractions, hotels, and restaurants, built front-to-back with validated CRUD routes.

LaravelMySQLTailwindBootstrap

Trainings & certificates

Google Cybersecurity Certificate

Coursera · 9-course professional certificate covering networks, SIEM tools, Python, Linux, and SQL for entry-level cybersecurity roles.

View credential ↗

Cyber Sentinel Secure

X-code, PT. Teknologi Server Indonesia · hands-on training program.

Security Manpower Training Program (SMTP) Indonesia

NSHC & KISIA · 30-hour training period, 12 Aug to 6 Sep 2024.

NDG Linux Essentials Course

Cisco Networking Academy · Linux fundamentals partner course.

Ethical Hacker

Cisco Networking Academy · penetration testing methodology, vulnerability exploitation across web, cloud, mobile and IoT, and post-exploitation reporting.

Achievements

3rd Place, Hackathon Siber Tangguh Bangsa Merdeka · Fakultas Vokasi USU

Solved 30 web exploitation challenges as part of team "Hengker Pesbuk" in a regional Capture the Flag hackathon.

Bakti BCA Scholarship · PT Bank Central Asia Tbk

Selected from over 1,000 applicants; awarded educational funding and a one-year self-development program.

1st Place, University Business Impact Plan Competition · BCA

Helped the MSME product "Inaklin" create a positive impact on sales growth and product awareness.

1st Winner, Best Web Programming Final Project · HIMATIF x ITLG Mini Competition

Recognized for the best web programming project among peers in the same cohort, with AmbiVerse.

Let's talk about security, backend, or your next project.

Open to internships, collaborations, and conversations about application security.