Security Automation • Linux Infrastructure • Web & Data Actively contributing to open source Teknologi Informasi '23 @ Universitas Udayana, Bali
- Open source, upstream: I send patches to projects I actually use, with merged contributions to multiple open source projects. A good share of my PRs are security hardening: tightening CSP and CORS, enforcing RBAC, adding login lockout, and remediating OWASP ZAP and Semgrep findings.
- Security automation: My thesis project is an open-source SOAR pipeline — Wazuh as the SIEM, n8n for orchestration, and a local Ollama model for triage, with analyst approval over Telegram before any active response fires.
- Linux, on real hardware: I turned an old laptop into a bare-metal Rocky Linux 9 server and run it as a live sysadmin lab against the RHCSA EX200 domains — LVM, firewalld, SELinux, SSH hardening, rootless Podman.
- IT audit coursework: Assessed bWAPP end to end and mapped the findings to OWASP Top 10 2021, with a written audit report as the deliverable.
- Web & 3D: Building interfaces with React, Astro, SvelteKit, and Three.js — from scroll-driven WebGL microsites to small tools people actually use.
- Data & ML: Most of my notebooks live here — information retrieval (TF-IDF vs VSM), a RAG system over Indonesian legal and tax PDFs, and sentiment analysis coursework.
- Daily driver: Zorin OS, with Tailscale tying my machines and lab servers together.
$ cat focus_areas.json
{
"security_operations": ["SOAR Pipelines", "Wazuh SIEM", "Threat Intel Enrichment", "Active Response"],
"linux_infra": ["Rocky Linux", "LVM", "SELinux", "firewalld", "Podman", "Tailscale"],
"it_audit": ["OWASP Top 10 2021", "Web App Assessment", "Audit Reporting"],
"web_and_data": ["React", "Astro", "SvelteKit", "Three.js", "Jupyter", "RAG"]
}| Project | What it is |
|---|---|
| soar-project | Open-source SOAR for malware and phishing: Wazuh 4.9.2 + n8n + local Ollama, multi-source threat intel (VirusTotal, Safe Browsing, URLScan), confidence-tiered response with human-in-the-loop approval. Thesis project. |
| linux-enterprise-lab | Bare-metal Rocky Linux 9 lab mapped to the RHCSA EX200 domains, documented task by task. |
| it-audit-bwapp | Web application penetration test of bWAPP mapped to OWASP Top 10 2021, delivered as an IT audit report. |
| apex-stradale | Scroll-driven WebGL concept car microsite, built with Three.js and Vite. |
| stki-rag | Retrieval-augmented QA over Indonesian legal and tax documents. |
| myheic | Free, offline HEIC to JPG converter for Windows. |
View GitHub stats, top languages, streak, and activity
|
|
|
|
|
|
|
|
|
Secure by default. Curious by nature.