Silver computing chassis with black cylindrical computers, photographed at imgix.
Infrastructure, in focus.

kdandy

I’m a Security & DevSecOps engineer based in Indonesia. I build cloud infrastructure, delivery pipelines, and tools that support day-to-day work.

about

I work on the parts of software that keep it running: the infrastructure, the release process, and the security behind both.

kdandy, Security and DevSecOps Engineer
kdandy · Based in Indonesia

My work spans DevSecOps and software development. Some of it happens in cloud environments and delivery pipelines; some of it is closer to the people using an internal application every day.

The connection is practical: understanding what a system needs to do, how it will be used, and what it takes to keep it working.

More about me

In DevSecOps, I work from architecture through deployment: assessing requirements, choosing cloud services, and adding security checks to the release process. That includes vulnerability scanning, container hardening, compliance checks, and secrets management, with performance and cost in the picture too.

The work continues after deployment. I monitor performance and security, troubleshoot issues, and adjust the infrastructure with development and operations teams. I also build and maintain internal web applications, including HR systems, starting with the processes and information the people using them actually need.

Practice

01

Security engineering

I work with zero-trust architecture, vulnerability scanning, security policies, and incident response. The scope includes both the checks applied before deployment and the monitoring needed once a system is running.

02

Cloud & platform

I work on cloud architecture, Kubernetes environments, and infrastructure defined in code. Alongside provisioning, that includes security baselines, monitoring, and investigating changes to running infrastructure.

03

DevSecOps & automation

I build delivery pipelines with GitOps, application scanning, container image signing, and automated compliance checks. These checks sit within the release process, alongside delivery automation.

04

Software development

I design, develop, and maintain web applications for internal business processes. The work starts with understanding the existing workflow and translating those needs into a system people can use in their daily work.

Experience

Confidential

4 yrs 9 mos

Remote

  1. Software & Systems Architect

    Feb 2025 - Present · 1 yr 8 mos

    Full-time · Bangkok

    About this role

    Lead the design and delivery of software and systems engineering projects. Translate requirements into architecture, component interfaces, and implementation priorities. Review technical decisions around data flow, dependencies, performance, and security. Work directly on complex debugging and integration issues while guiding engineers through design and code reviews. Coordinate releases and take responsibility for how changes behave across the wider system.

  2. Software R&D Engineer

    Sep 2024 - Jan 2025 · 5 mos

    Full-time · Bangkok

    About this role

    Developed prototypes and internal tools to evaluate technical approaches before integrating them into existing systems. Investigated problems across application logic, service interactions, and operating system behavior. Compared implementations through functional testing, performance measurements, and runtime analysis. Reviewed technical designs, documented tradeoffs, and helped engineers resolve issues involving compatibility, resource usage, and unexpected execution behavior.

  3. Software Engineer, Systems & Security

    Mar 2023 - Aug 2024 · 1 yr 6 mos

    Full-time · Bangkok

    About this role

    Developed and maintained software components, supporting tools, and system integrations. Used code analysis, debugging, and reverse engineering to understand application behavior and investigate technical issues. Worked on kernel modifications and analyzed drivers, focusing on their internal logic and interactions with the operating system. Implemented fixes and tested their effects on functionality, stability, and security.

  4. Associate Engineer, Software Development

    Jan 2022 - Feb 2023 · 1 yr 2 mos

    Contract

    About this role

    Implemented application features, integrated APIs, and worked with data storage in existing projects. Traced defects through application logic and dependencies, reproduced failures, and tested fixes before submission. Contributed to code reviews, maintained technical documentation, and supported release preparation. Explored software internals through debugging and small reverse engineering projects alongside regular development work.

PT. Jayabaru Logistik Utama

7 mos

Hybrid

  1. Software Engineer

    Feb 2026 - Jul 2026 · 6 mos

    About the company

    PT. Jayabaru Logistik Utama is a logistics and supply chain company focused on improving operational efficiency through reliable, scalable, and technology-driven internal systems. Its digital infrastructure supports human resources, finance, and internal operations.

  2. Software Engineer Intern

    Jan 2026 · 1 mo

    Internship · Jakarta, Indonesia

Teknalogi Transformasi Digital

DevSecOps Engineer

Aug 2025 - Mar 2026 · 8 mos

Part-time · Semarang, Central Java, Indonesia · Hybrid

About the company

Teknalogi builds technology solutions around clients' goals and challenges, with a focus on growth, adaptability, and security.

Dealls – Jobs, CV & Mentoring

Instructor

Nov 2024 - Oct 2025 · 1 yr

Part-time · Jakarta, Indonesia · Remote

About this role

Dealls is a career platform helping early-career professionals and fresh graduates access job opportunities in Southeast Asia through curated job listings, career resources, and community-driven content.

Delivered practical sessions on resume building, interview strategies, LinkedIn optimization, and personal branding. Led interactive workshops and one-on-one mentoring, equipping participants with actionable insights and real-world examples to improve their confidence and job application success.

ANFORCOM

Back End Developer

May 2024 - Sep 2025 · 1 yr 5 mos

Contract · Semarang, Central Java, Indonesia · Hybrid

About the company

ANFORCOM (Annual Informatics Competition) is a technology and innovation event for developers, designers, and problem-solvers. Its competitions and showcases span software development and UI/UX innovation, encouraging collaboration and practical solutions to real-world challenges.

Mahkamah Agung Republik Indonesia

Software Engineer Intern

Jul 2025 · 1 mo

Internship · Jakarta, Indonesia · On-site

About the company

The Supreme Court of the Republic of Indonesia is the country's highest judicial authority. It holds the power of final appeal, oversees the administration of justice, and supports the consistent application of law across courts nationwide.

tiket.com

Software Engineer Intern

Feb 2025 - Jul 2025 · 6 mos

Internship · Jakarta, Indonesia · Hybrid

About the company

tiket.com is an Indonesian online travel agency offering bookings for flights, hotels, trains, events, and car rentals, helping shape digital travel services in Southeast Asia.

GoTo Group

Data Analyst Intern

Jul 2024 - Dec 2024 · 6 mos

Internship · Jakarta, Indonesia · Hybrid

About the company

GoTo is an Indonesian digital ecosystem spanning mobility, delivery, payments, financial services, merchant solutions, and e-commerce through Tokopedia. Its platforms rely on scalable infrastructure to support users, merchants, and driver partners.

PT. DEVOVER ATTRACTHOR

Network Security Engineer

Apr 2022 - Sep 2024 · 2 yrs 6 mos

Full-time · Jakarta, Indonesia · Hybrid

About this role

PT DEVOVER ATTRACTHOR is a privately held Indonesian company specializing in computer and network security services, providing tailored security solutions for its clients.

Designed and developed network security architecture, defined security frameworks, standards, and policies, and architected solutions including firewalls, intrusion detection and prevention systems, and secure VPNs. Conducted risk assessments, identified vulnerabilities, and developed mitigation measures. Collaborated across teams to embed security throughout the IT environment and adapt to emerging security threats.

Kementerian Komunikasi dan Informatika Republik Indonesia

Software Engineer Intern

Sep 2023 - Nov 2023 · 3 mos

Internship · Jakarta Metropolitan Area · Hybrid

About the company

Kominfo is Indonesia's Ministry of Communication and Information Technology, responsible for digital infrastructure, public information, and national technology policies. Its digital transformation initiatives support open data, cybersecurity, and public access to information.

Comcast

Network Engineer

Sep 2022 - Aug 2023 · 1 yr

Internship · Massachusetts, United States · Remote

About the company

Comcast is a US telecommunications and media company providing internet, cable, and voice services, with extensive broadband infrastructure supporting digital connectivity across the country.

Data Science Lab

Data Analyst

Jul 2021 - May 2023 · 1 yr 11 mos

About the company

Data Science Lab is a research and analytics focused organization that helps businesses and institutions make data-driven decisions through advanced statistical modeling, machine learning, and data visualization.

Hexaedge Networks Private Limited

Back End Developer

Aug 2022 - Jan 2023 · 6 mos

Vietnam · Remote

About this role

HexaEdge Software is a Vietnam-based SaaS company developing workflow automation tools for SMEs.

Designed and implemented REST APIs in Node.js, integrated RabbitMQ for asynchronous processing, and reduced API response times by 35% through database query optimization.

Kpler

Cloud Infrastructure Engineer

Apr 2022 - Dec 2022 · 9 mos

Contract · Belgium · Remote

About this role

Kpler is a data intelligence company headquartered in Belgium, specializing in commodities analytics and trade flow tracking using satellite data, IoT, and AI-driven models.

Managed and optimized Kpler's AWS-based infrastructure, implementing automated scaling groups and cost optimization strategies. Configured secure VPN access for distributed engineering teams and set up monitoring dashboards with Grafana and Prometheus to ensure 99.9% service uptime.

Securovate Technologies

DevSecOps Engineer

Aug 2021 - Dec 2022 · 1 yr 5 mos

Contract · United States · Remote

About this role

Securovate Technologies is a US-based cybersecurity solutions provider offering application security, DevSecOps consulting, and cloud security integration for enterprise clients.

Embedded security tooling into Jenkins and GitLab CI pipelines, implemented automated SAST and DAST scans, and configured container image hardening processes. Developed custom policy-as-code rules to enforce secure configurations in Kubernetes clusters, collaborated with developers to remediate vulnerabilities early, and improved security scan turnaround times.

Shoreline.io (Acquired by NVIDIA)

DevOps Engineer

Jan 2022 - Mar 2022 · 3 mos

Freelance · United States · Remote

About the company

Shoreline.io is a US-based incident automation platform for cloud operations teams.

Personio

Security Automation Engineer

Sep 2021 - Feb 2022 · 6 mos

Contract · Germany · Remote

About this role

Personio is a German HR software company serving small and medium-sized enterprises across Europe.

Developed Python automation scripts to process vulnerability scanning results, integrated security checks into GitLab CI/CD, and collaborated with engineering teams to remediate findings pre-release.

Toptal Client – SaaS Startup (US)

Full Stack Developer

Oct 2021 - Dec 2021 · 3 mos

Freelance · United States · Remote

About this role

The client was a US-based early-stage SaaS company building a project management tool for small businesses. Operating in a fully remote setup, the team focused on rapid feature delivery with a distributed workforce across three continents.

Developed backend features in Node.js, integrated Stripe for subscription billing, and improved API performance by optimizing query logic. On the frontend, implemented React components for the dashboard and improved page load.

HappyFresh

Application Security Engineer

May 2021 - Sep 2021 · 5 mos

Freelance · Thailand · Remote

About the company

HappyFresh is a Southeast Asian online grocery platform operating in Indonesia, Malaysia, and Thailand, partnering with supermarkets to offer same-day grocery delivery.

Contentful

API Engineer

Jan 2020 - Apr 2020 · 4 mos

Contract · Germany · Remote

About this role

Contentful is a German content management API provider used by global brands to power digital experiences.

Developed and optimized GraphQL endpoints, implemented Redis caching layers, and improved API documentation for faster developer onboarding.

Delivery Hero

Security Operations Analyst

Aug 2019 - Dec 2019 · 5 mos

Contract · Berlin, Germany · Remote

About this role

Delivery Hero is a global online food delivery company headquartered in Berlin, operating in over 70 countries.

Monitored security events via Splunk, identified anomalies in API traffic patterns, and worked with the incident response team to mitigate account takeover attempts.

Education

Bachelor of Computer Science

Diponegoro University · Aug 2023 - Sep 2027

Studied computer science with focus on network security, distributed systems, and cloud computing.

Full Stack Engineer (Scholarship Program)

Coding Camp 2026 Cohort · Feb 2026 - Jul 2026

Managed cloud infrastructure on AWS and GCP. Assisted with container orchestration, monitoring setup, and security hardening for production workloads.

Certifications & recognition

Awarded the Gold Medal & Best Invention Award - Tertiary at World Young Inventors Exhibition 2026

Issued by World Young Inventors Exhibition (WYIE) · May 2026

Received the Gold Medal and Best Invention Award - Tertiary at the 10th World Young Inventors Exhibition 2026 (WYIE 2026), Malaysia, for "Snugsy Nest: A Digital Platform for Inclusive Education and Accessible Support Services for Children with Special Needs." The project focuses on supporting inclusive education through a digital platform that provides accessible support services for children with special needs.

Awarded the Silver Medal at Indonesia Inventors Day 2025

Issued by Indonesia Inventors Day · Sep 2025

Received the Silver Medal at Indonesia Inventors Day for the invention "CharingCub: A Digital Innovation for the Future of Children and Family Empowerment," a digital innovation aimed at supporting children's development and strengthening family empowerment.

Awarded Winning the GDSC UNDIP Capstone Project 2024

Issued by 2024 · Nov 2024

The Best Capstone Project for GDSC UNDIP 2024 with the theme "Peduli Carbon an innovative solution to help individuals measure and reduce their carbon footprint"

2nd Place Cipher Storm CTF

Sep 2024

Cipher Storm CTF is an advanced Jeopardy-style tournament organized by independent infosec communities, featuring 36 hours of nonstop challenges in cryptography, digital forensics, steganography, and reverse engineering. The problems are designed by active security researchers, ensuring realistic complexity and relevance to modern attack techniques.

Achieved second place after developing a custom packet capture analysis tool in Go, which identified covert communication channels embedded in network traffic. This gave our team the fastest solve time in the forensics category, significantly boosting our overall standing.

2nd Place Malaya Cyber Arena CTF

Sep 2024

The Malaya Cyber Arena CTF is a Southeast Asia-wide cybersecurity tournament hosted by the Malaya Security Alliance, with categories including network exploitation, steganography, and OSINT. The event adopted a Jeopardy-style format over a continuous 36-hour period.

Achieved second place by developing a custom Go-based PCAP analysis toolkit that revealed hidden data streams in under 30 minutes.

Winner Nusantara Cyber Defense Challenge

Issued by 2024 · Apr 2024

Won first place in the Nusantara Cyber Defense Challenge 2024, a national CTF-style cybersecurity competition organized by the Nusantara Tech Forum. The event focused on real-world scenarios across network security, reverse engineering, web vulnerabilities, and cryptography.

Led technical efforts in identifying and patching simulated threats, analyzing exploits, and responding to attack vectors under time pressure. Our team ranked first based on accuracy, speed, and strategic execution, strengthening practical skills in penetration testing and teamwork in high-stakes environments.

3rd Place Kalimantan Offensive Security Cup

Apr 2023

The Kalimantan Offensive Security Cup is an annual hybrid competition combining Red Team and Blue Team formats to test offensive and defensive cybersecurity skills.

Earned third place by executing initial foothold exploitation and performing lateral movement within simulated enterprise network environments.

Runner Up Archipelago Cloud Challenge 2023

Issued by 2023 · Mar 2023

Competed in a nationwide event focused on deploying scalable cloud solutions. Built a microservice-based web app on AWS and implemented CI/CD pipelines. Placed second based on system stability, resource optimization, and documentation quality.

Finalist DEFID CTF 2022

Oct 2022

DEFID CTF is a national level cybersecurity tournament hosted by the DEFID security community, with a focus on cryptography, binary exploitation, and steganography.

Advanced to the finals by building efficient pwntools-based scripts to solve complex heap exploitation challenges under strict time constraints.

Finalist ASEAN Cyber Shield CTF

Aug 2022

The ASEAN Cyber Shield CTF is a regional competition testing skills in binary exploitation, mobile reverse engineering, and advanced web security. It is organized by the ASEAN Cybersecurity Centre and features participants from multiple Southeast Asian countries.

Reached the finals after developing a custom heap exploitation script using pwntools to bypass ASLR protections on Linux servers.

Winner Eastern Indonesia Code Sprint

Issued by 2022 · Jun 2022

Led a three-person team in a 24-hour sprint to build a web-based logistics tracking tool. Developed both frontend and backend within the time limit, and delivered a fully functional demo that scored highest in usability, technical accuracy, and presentation.

Finalist BlackNode CTF

Jun 2022

BlackNode CTF is a mid-scale cybersecurity event featuring cryptography, digital forensics, and malware reverse engineering. The challenge set emphasizes creative problem solving under strict time limits.

Reached the finalist stage by building a modular Python toolkit to decode layered encryption schemes in record time, contributing multiple category first solves to the team's scoreboard.

Top 3 Indonesian Offensive Security Drill

Issued by 2022 · Jan 2022

Placed among the top three in a red team vs blue team exercise focusing on penetration testing and defense hardening. Specialized in bypassing WAF rules, exploiting SSRF and insecure deserialization, and post-exploitation persistence in Linux environments. Tools included Burp Suite Pro, Cobalt Strike, and custom Python scripts for lateral movement simulations.

Winner Southeast Asia Network Defense War

Nov 2021

The Southeast Asia Network Defense War is a regional cyber defense competition in which teams must protect live network infrastructure from continuous simulated attacks.

Won first place by successfully mitigating multiple intrusion attempts through custom firewall configurations and rapid patching of vulnerable services in real time.

Runner Up Southeast Machine Learning Systems Build Off 2021

Issued by 2021 · May 2021

Developed an end-to-end ML pipeline for predicting network anomalies using unsupervised learning (Isolation Forest, Autoencoders), with streaming data via Apache Kafka and real-time inference on TensorFlow Serving. Integrated a web-based dashboard built in Flask and React to monitor model drift and performance metrics.

3rd Place SecureForge CTF 2021

Mar 2021

SecureForge CTF is a competitive cybersecurity event known for its challenging cryptography and forensics problems. Each category reflects real data breach scenarios, requiring participants to think like both attackers and incident responders.

Earned third place after successfully reconstructing deleted database entries from corrupted backups and recovering hidden credentials from manipulated PDF metadata.

Second Place Nusantara UI/UX Design Series 2021

Issued by 2021 · Mar 2021

Selected as a finalist in a multi-phase design competition focused on public service innovation. Led research and interface development for a government service portal. Recognized for clean design, accessibility, and consistency in user flow.

Winner HexaShield CTF

Aug 2020

HexaShield CTF is an open competition for ethical hackers, emphasizing creative exploitation of modern application stacks, cryptography, and steganography.

Won first place by leading a targeted web exploitation campaign against a vulnerable microservice architecture, chaining SSRF and privilege escalation exploits to achieve full system compromise.

Top 10 ByteHunt Security Open

Jan 2020

ByteHunt Security Open is a national level CTF designed to attract mixed teams of students and professionals. The challenge set is inspired by common vulnerabilities found in public bug bounty reports.

Placed in the Top 10 out of 120 teams after solving multiple steganography and forensic disk image recovery challenges under tight deadlines.

Honorable Mention UI/UX for Embedded Systems Hackathon 2019

Issued by 2019 · Oct 2019

Designed the user interface for a touchscreen-based smart thermostat prototype using Qt/QML, tailored for resource-constrained embedded hardware. Focused on optimizing rendering, touch latency, and information hierarchy for constrained resolution. Judges noted the design's clarity and performance given hardware limitations.

1st Mechatronika Robotics Challenge 2019

Issued by 2019 · Jul 2019

Led a team in building an autonomous ground robot for obstacle navigation and object retrieval in a simulated industrial environment. Integrated computer vision using OpenCV with ultrasonic sensor arrays for real-time path planning. The robot operated on a Raspberry Pi with Python-based control logic and achieved the fastest completion time in the final round. Judges recognized the system's stability and adaptive decision making under variable lighting and surface conditions.

3rd Place Data Breach Response Challenge

Dec 2018

Data Breach Response Challenge is an incident response themed competition, where participants investigate and remediate simulated corporate breaches.

Earned third place after identifying and containing a simulated ransomware attack within 30 minutes, recovering encrypted files from partial backups and memory dumps.

Top 5 Finalist Indonesia Robotic System Design 2018

Issued by 2018 · Feb 2018

Competed in a design and systems integration competition focused on modular robotics for educational use. Designed a compact, Arduino-based robotic arm with interchangeable end effectors, programmed using C++ and integrated with a custom-built Bluetooth interface for mobile control. The project was shortlisted for its simplicity, cost-efficiency, and potential for real-world application in STEM learning environments.

Tools of the trade
KubernetesDockerTerraformAWSGCPGitHub ActionsArgoCDAnsibleLinuxPythonGoBashPrometheusGrafanaELK StackVault

works

Selected projects2024 - 2025

A selection of my work in cloud security, software delivery, infrastructure, and monitoring. Each project looks at a different part of building and operating a system. Open one for the scope and the approach behind it.

contact

What are you working on?
I’d like to hear about it.

If you’re working on a cloud platform, a delivery pipeline, or an internal application, tell me what you’re building and where you could use help. You don’t need a finished brief. A few sentences about the problem are enough to start the conversation.

work@kdandy.com ↗

works

Explore the project archive on GitHub ↗.