🚀 Senior Application Security Engineer | Backend Architect | AI-Assisted Builder
I build secure, scalable, production-grade systems and leverage AI to accelerate both backend and frontend development. Experienced in leading engineering teams, architecting security platforms, and delivering enterprise solutions.
- 🔐 6+ years in Application Security & Penetration Testing
- 🏗 Architect & Lead Developer of Security Assessment Platform (SIERA)
- 👨💻 Backend Engineer (Golang, Node.js, PHP)
- 🤖 Using AI to accelerate development lifecycle (backend & frontend)
- 🧩 Strong in multi-tenant SaaS architecture & system design
- 👥 Led cross-functional engineering team (8 members)
- 🎯 Focused on secure, scalable, and production-ready systems
-
🛡 Burp Suite Certified Practitioner (BSCP) – PortSwigger https://portswigger.net/web-security/e/c/5e8b4393196a8d90
-
🧠 eLearnSecurity Web Application Penetration Tester eXtreme (eWPTX) – INE https://verified.elearnsecurity.com/certificates/07afa842-f330-4b78-ac3b-133417b98939
A multi-tenant HR platform designed with security-first architecture and built using AI-assisted development.
Backend
- Node.js + Express
- JWT Authentication (Access + Refresh Token via httpOnly Cookie)
Frontend
- Next.js 16 (App Router)
- React 18 + TypeScript
- Tailwind CSS
- Recharts (data visualization)
- Framer Motion (UI animation)
Database
- PostgreSQL
- RBAC (database-driven roles & permissions + dynamic menu mapping)
- Hardened HTTP headers using Helmet
- API Rate Limiting
- Secure token handling (httpOnly cookies)
- Structured logging using Pino
- Request logging middleware
- Audit logs with tamper-evident hash-chain design
- 🧩 Multi-tenant SaaS architecture
- 🔐 Security-first design (aligned with real pentesting experience)
- 🤖 Built using AI-assisted development (backend & frontend acceleration)
- ⚙️ Production-ready with Docker-based deployment
- Container-based internal security testing platform
- Built with Golang, Node.js, PostgreSQL, Redis
- Designed for scalable vulnerability assessment workflows
- Used in enterprise security operations
- Vulnerability Assessment Automation Tools
- Backend Systems for Enterprise Applications
- Security Testing Workflows & Reporting Automation
- Golang, Node.js (Express), PHP (Laravel, CodeIgniter, CakePHP)
- PostgreSQL, Redis, Docker, Linux, CI/CD
- Web Security (OWASP Top 10)
- API Security Testing
- Manual Exploitation (Burp Suite)
- CVSS Risk Analysis
- Accelerating development lifecycle using AI
- Rapid prototyping & scalable system scaffolding
- 🔐 Security is not an afterthought — it is built-in by design
- ⚙️ Systems must be scalable, observable, and production-ready
- 🤖 AI is a force multiplier, not a shortcut
- 📊 Focus on real-world impact & maintainability
- 💼 LinkedIn: https://www.linkedin.com/in/achmad7113/
- 📫 Email: achmadfirdaus244@gmail.com
- 📍 Indonesia
⭐ Building secure systems, scaling engineering teams, and leveraging AI to move faster.