Yehezkiel Wiradhika
Penetration Tester · Security Engineer · DevSecOps
ZoomA Penetration Tester and DevSecOps Engineer with 2+ years of experience in offensive security and application penetration testing — backed by real production engineering experience. I understand vulnerabilities from both sides: as an attacker who has tested 20+ web applications for critical flaws, and as an engineer who has built and deployed the very systems being attacked.
On the offensive side: VAPT across web applications and network infrastructure using Burp Suite, Nmap, SQLMap, and OWASP Top 10 methodology — including SQL Injection, Broken Access Control, and request tampering exploits found during real engagements. On the defensive side: detection engineering with Wazuh SIEM, Snort IDS, and honeypot analysis (Cowrie, SNARE, Tanner).
My engineering background sets me apart — I bring hands-on production experience in Go (Golang) microservices, Hexagonal Architecture, gRPC, and distributed systems, plus infrastructure expertise across Docker, Kubernetes, Terraform, and CI/CD pipeline security (SAST/DAST via Semgrep, SonarQube, OWASP ZAP). This means I find vulnerabilities most engineers miss, and build defenses most pentesters can't. I also build custom security tools and SaaS: Vortex (threat intelligence), AegisCI (secure CI/CD pipeline), GateKeeper Go (zero-trust API security proxy), RBACLens (Kubernetes RBAC blast radius scanner), and Secure Go (hardened Go API template). Pursuing eJPT certification, with OSCP as the next target.
Additional background in AI/ML system integration (YOLO, LangChain, TensorFlow, FastAPI) and secure authentication design (JWT, OAuth2, Role-Based Access Control). ITS Informatics Engineering graduate and Ruang Guru Go Backend Engineering Bootcamp alumni.
Education & Certifications
- B.Eng. Informatics (Comp. Sci.), Institut Teknologi Sepuluh Nopember (ITS) — Graduated Sept 2025 (GPA ~3.40)
- Go Backend Engineering Bootcamp, Ruang Guru — GPA ~3.90
- eLearnSecurity Junior Penetration Tester (eJPT) — In Progress
Work Experience
Where I've shipped Go backends, distributed systems, industrial AI, and security tools.
Penetration Tester, DevSecOps & Go Backend Engineer
Studio 8 (Malang)·Freelance·Malang, Indonesia
Jul 2026 – Present
15 Status Enums & Priority 0–4PWA Offline-First CacheAutomated CI/CD + SonarQube
Sole engineer building a production-grade real-time task management platform for a creative studio, combining WhatsApp-style conversational messaging with structured Kanban task tracking (15 status types, 0–4 priority system).
- Conducted Penetration Testing on several of Studio 8 web applications
- Architected Go backend utilizing WebSocket real-time messaging, PostgreSQL, and Redis caching.
- Engineered Next.js PWA offline-first architecture with IndexedDB local caching and date-range server sync.
- Provisioned production infrastructure with Nginx reverse proxy, Dockerized deployment, RabbitMQ, PostgreSQL, and PM2.
- Implemented automated CI/CD pipeline incorporating SonarQube static code analysis and automated testing.
Stack:GoNext.jsTypeScriptWebSocketPostgreSQLRedisRabbitMQDockerNginxPWACI/CDSonarQube
Go Backend & Computer Vision Engineer (Distributed Systems & AI)
PT. Century Batteries Indonesia (Astra Otoparts)·Contract·Jakarta, Indonesia
Dec 2025 – June 2026
~Rp100M/yr Cost Saved70% Inspection Time Cut<1% Misidentification RateRp24M Hardware Saved via gRPC
Go Backend Engineer at an Astra manufacturing subsidiary specializing in industrial Computer Vision systems, Edge-to-Cloud architecture, and enterprise logistics platforms.
- Engineered Computer Vision Cover Part Number Smart Sorter (YOLO, ~99% mAP50) cutting tray inspection time by 70% and saving ~Rp100,000,000/year in manual labor.
- Refactored PLT Line CV architecture from monolith to Edge-to-Cloud via gRPC, eliminating 3 industrial mini PCs and saving Rp24M in hardware.
- Architected Enterprise LMS (Hexagonal Architecture, Redis caching, RabbitMQ) serving 600+ users with a 40% reduction in response times.
- Built Battery Request Management System (REST API + PostgreSQL) for centralized logistics serving 600+ users.
- Engineered Go AI Orchestration Layer for microservices Face Swap platform with gRPC and Goroutines isolating Python FastAPI inference services.
Stack:GoPythongRPCYOLOPostgreSQLRedisRabbitMQFastAPIDockerHexagonal Architecture
Fullstack Engineer (Backend, DevSecOps)
Volvinco·Self-employed·Surabaya, Indonesia
Apr 2024 – Dec 2025
1,000+ Concurrent Users>90% Test Coverage60% Faster Deploy Time1st Place FTIRS Competition
Led Go backend and cloud infrastructure engineering at a security-focused software agency across 3 production products: Kos Kaka (property), Muncak Kuy (e-commerce), and Veritax (fintech RAG chatbot).
- Built high-concurrency Go backend systems using gRPC, Redis, RabbitMQ, and Kafka supporting 1,000+ concurrent active users.
- Designed REST APIs (OpenAPI/Swagger) maintaining >90% automated unit and integration test coverage.
- Managed AWS and VPS production infrastructure via GitHub Actions CI/CD, reducing deployment times by 60%.
- Won 1st Place at FTIRS National Business Competition and secured ITS Youth Technopreneurship (IYT) funding.
Stack:GogRPCRedisRabbitMQKafkaPostgreSQLAWSDockerGitHub Actions
Penetration Tester
DPTSI ITS·Internship·Surabaya, Indonesia
Sept 2024 – Jan 2025
20+ Systems TestedCritical Vulnerabilities UncoveredeJPT in Progress
Conducted offensive security, web application, and network penetration testing across 20 enterprise systems at ITS's central Directorate of Information Technology Services.
- Executed comprehensive penetration tests using Nmap, SQLMap, Metasploit, Hydra, Nessus, Nikto, Dirsearch, Burp Suite, and OWASP ZAP.
- Uncovered and documented critical vulnerabilities including SQL Injection (database leak), Broken Access Control (admin privilege escalation), and request tampering exploited for online gambling.
Stack:Burp SuiteOWASP ZAPSQLMapMetasploitNmapNessusSecurity AuditingPenetration Testing
Fullstack Developer
PT. KYB Indonesia (Astra Otoparts)·Internship·Bekasi, Indonesia
Aug 2023 – Dec 2023
80% Reduced Data Loss Risk60% Administrative Efficiency Gain200+ Active Employees
Led development of KYB's internal Training Center Administration System following Agile SDLC methodologies.
- Migrated legacy decentralized Excel workflows to a centralized internal SQL database and web portal.
- Eliminated 80% of data loss risk and boosted training administration efficiency by 60% across 200+ active employees.
Stack:PHPMySQLAJAXjQueryBootstrapAgile SDLC
Backend Engineer
StudentsXCEOs League 2022·Project·Indonesia
2022
Engineered backend services and authentication systems for the national StudentsXCEOs League platform.
- Built user registration, event management, and secure JWT authentication with Role-Based Access Control (admin/user).
- Integrated validated REST APIs via Axios on the React frontend.
Stack:Node.jsExpress.jsMongoDBMongooseJWTREST APIReact
Frontend Engineer
Schematics ITS 2021·Project·Surabaya, Indonesia
2021
Developed public event platforms, ticket purchases, and interactive web features for ITS's premier IT festival.
- Built National Programming Contest (NPC) Registration and REEVA Ticket Purchase flows with React, Next.js, and Tailwind CSS.
- Engineered landing pages, sponsor showcase integrations, and interactive 3D virtual tour elements.
Stack:ReactNext.jsTailwind CSSJavaScriptUI/UX