Application Security Engineer
PT Dipo Star Finance, Yogyakarta, IndonesiaApr 2026 – Present
- Lead penetration testing and attack simulation across web applications, mobile applications, and APIs before production release.
- Established a secure code review process, manual and tool-assisted, for application releases.
- Built an internal vulnerability monitoring system that tracks CVEs affecting company dependencies to support patch prioritization.
- Integrated SAST and SCA into the automated security testing pipeline.
Backend Engineer
PT Dipo Star Finance, Yogyakarta, IndonesiaNov 2021 – Apr 2026
- Led backend development projects using Python, FastAPI, PostgreSQL, and Redis, from design through deployment.
- Designed system architecture and defined the technology stack for internal projects.
- Embedded security considerations into application design from the architecture stage (secure by design).
- Conducted code reviews to maintain code quality and security standards across the team.