Secure Backend Engineer · DevSecOps · Penetration Testing
ZoomA Secure Backend / DevSecOps Engineer with 2+ years of experience designing, shipping, and operating production-grade Go (Golang) microservices and distributed systems — backed by real penetration testing experience. I understand vulnerabilities from both sides: as an attacker who has probed 20+ web applications, and as an engineer who has built and deployed the systems being attacked.
Backend expertise includes Hexagonal Architecture, Clean Architecture, gRPC (Protobuf), WebSocket real-time systems, Redis, and RabbitMQ. Infrastructure expertise spans the full deployment lifecycle — Docker, Kubernetes, Terraform, Nginx reverse proxy, and CI/CD automation via GitHub Actions with SAST/DAST (SonarQube, Semgrep), automated unit and integration testing, and security-first pipeline design. Proficient in AWS and Cloudflare cloud infrastructure, load balancing, distributed tracing, and monitoring (Prometheus, Grafana).
On the offensive side: VAPT across web applications and network infrastructure using Burp Suite, Nmap, SQLMap, and OWASP Top 10 methodology. On the defensive side: detection engineering with Wazuh SIEM, Snort IDS, and honeypot analysis (Cowrie, SNARE, Tanner). I also build custom security tools and SaaS: Vortex (threat intelligence), AegisCI (secure CI/CD pipeline), GateKeeper Go (zero-trust API security proxy), RBACLens (Kubernetes RBAC blast radius scanner), and Secure Go (hardened Go API template). Pursuing eJPT certification.
Additional background in AI/ML system integration (YOLO, LangChain, TensorFlow, FastAPI) and secure authentication design (JWT, OAuth2, Role-Based Access Control). ITS Informatics Engineering graduate and Ruang Guru Go Backend Engineering Bootcamp alumni.
Where I've shipped Go backends, distributed systems, industrial AI, and security tools.
Sole engineer building a production-grade real-time task management platform for a creative studio, combining WhatsApp-style conversational messaging with structured Kanban task tracking (15 status types, 0–4 priority system).
Go Backend Engineer at an Astra manufacturing subsidiary specializing in industrial Computer Vision systems, Edge-to-Cloud architecture, and enterprise logistics platforms.
Led Go backend and cloud infrastructure engineering at a security-focused software agency across 3 production products: Kos Kaka (property), Muncak Kuy (e-commerce), and Veritax (fintech RAG chatbot).
Conducted offensive security, web application, and network penetration testing across 20 enterprise systems at ITS's central Directorate of Information Technology Services.
Led development of KYB's internal Training Center Administration System following Agile SDLC methodologies.
Engineered backend services and authentication systems for the national StudentsXCEOs League platform.
Developed public event platforms, ticket purchases, and interactive web features for ITS's premier IT festival.