Who are you?The long answer

About

I started by writing software. That is why I measure every security control by what it costs the people who live with it.

I am a cybersecurity consultant in Jakarta. For more than a decade I have helped telecoms, government and enterprises across Southeast Asia and Japan protect what they build. I began as a developer. I know what a control costs the team that has to follow it, so I design security that teams can actually keep.

What I have learned

Security fails quietly. Not in the breach, but months earlier, when a rule was too slow to follow and someone found a way around it. So the work is not to add gates. It is to make the safe way the easy way, and to prove with numbers that it is working.

Where I have worked

The years 2010 to 2026 on a line, each role as a bar above it, the platform as a long bar below.
  1. 2010: Oracle and SAP integration developer, Intelfast Technology
  2. 2013 to 2018: system engineer and pre-sales, Virtus Technology Indonesia
  3. 2019 to 2021: cybersecurity consultant, Security Research Labs
  4. 2021 to now: lead solution consultant, OpenText
  5. 2022 to 2023: developer, then digital transformation consultant, Indonesian ministry
  6. 2025: principal DevSecOps consultant, Indonesian telecoms
  7. 2011 to now: Galasin.com and GalasinVR.com, built and run alongside

Lead Solution Consultant, OpenText (Micro Focus) · 2021 to now

I lead the technical side of sales in Southeast Asia for application security, data security, security operations, and identity and access. I explain technology and roadmaps to boards and to engineers, and I speak at public and private events.

  • Designed and ran a working DevSecOps framework across customers’ business units.
  • Mapped data protection rules country by country for PDPA compliance, which opened new markets in Southeast Asia.
  • Led the data security work that made the team the market leader for data security coverage in Indonesia.
  • Led customer retention in Indonesia to the highest rate in the region.
  • Part of the Indonesian cybersecurity sales team’s President’s Club recognition, year after year.

Cybersecurity Consultant, Security Research Labs · 2019 to 2021

Security programmes for leading telecoms in Indonesia and Japan, with global teams and several workstreams at once.

  • Raised NIST compliance by more than 30% for a major Indonesian telecom in six months.
  • Led security analysis and automation for a young Japanese telecom, joining custom tools to the SOC’s SIEM.
  • Wrote a SOC roadmap, improved threat detection and automated the response to known attacks.
  • Ran security awareness for executives during a cybersecurity emergency.
  • Secured a strategic security services partnership with a major Indonesian telecom.

System Engineer and Pre-Sales, Virtus Technology Indonesia · 2013 to 2018

Solution design and delivery for local and multinational enterprises: SIEM, SOA integration, data visualisation, vulnerability assessment and penetration testing, from the first conversation to the finished project.

Oracle and SAP Integration Developer, Intelfast Technology · 2010 to 2011

Custom Oracle ERP modules across versions 8.1 to 10g, and SAP Web GUI integrations through the SAP API that cut licence costs.

Independent work

  • Principal DevSecOps Consultant, Indonesian telecommunications companies (2025).
  • Digital Transformation Consultant, Indonesian ministry (2023).
  • Full Stack Developer, Indonesian ministry (2022).
  • Full Stack Developer, sports event registration platforms, Galasin.com and GalasinVR.com (2011 to now).

The projects page tells these stories.

Recognition

  • 2023: Best South East Asia Pre-Sales Consultant, OpenText.
  • 2015: Best Engineer, Virtus Technology Indonesia.
  • 2010: Third place, D’TI application competition, Gunadarma University.

Education and languages

Bachelor of Information Systems, Computer Science, Gunadarma University (2010). I work in Indonesian and English.

Tools I know

  • Security: DAST, SAST, MAST, open-source security, SIEM, SOAR, log management, data encryption, data discovery, test data management, IAM, CIAM, SSO, OAuth, OIDC, MFA, PAM, vulnerability assessment.
  • Programming: PHP, Python, Elixir.
  • Databases: PostgreSQL, MySQL, SQL Server, Redis, Valkey.
  • Ideas and frameworks: DevSecOps, secure coding, zero trust, SOA, OWASP, NIST, PDPA.
  • Platform: CI/CD, load balancing, WAF, key and secret management, containers, infrastructure as code, high availability.