Padang, Indonesia

Hendra Cahyo Setiawan

|

I am a Fullstack DevSecOps Engineer with practical experience in application development, infrastructure deployment, and cybersecurity operations. I combine development, infrastructure, and security to build reliable, scalable, and secure systems end to end.

4+ Years Experience
26+ Certifications
10+ Projects
101 SSL PHP AES
Hendra Cahyo Setiawan profile image
Background

About Me

I am Hendra Cahyo Setiawan, a Fullstack DevSecOps Engineer with hands-on experience in application development, infrastructure deployment, and cybersecurity operations.

My core strength lies in combining three areas that are often handled separately: development with Laravel, PHP backend development, REST APIs, and Next.js; infrastructure with Linux servers, Nginx, Apache, reverse proxy, VPN, firewall, and server hardening; and security with vulnerability assessment, Wazuh SIEM, Suricata IDS, YARA detection rules, and threat monitoring.

I enjoy building systems end-to-end—from writing code and deploying production environments to securing infrastructure and implementing monitoring for threat detection. I believe strong systems should be reliable, scalable, and secure, and I am continuously improving my skills in DevSecOps, security engineering, and cloud-native infrastructure while expanding my professional communication in English for global collaboration.

Open to: Remote opportunities | DevSecOps | Fullstack Engineering | Security Engineering | Infrastructure Security.

IT Security Specialist

Hardening servers, building firewall rules, conducting security audits, and aligning with ISO 27001 compliance standards.

Full-Stack Engineer

Developing scalable systems, API development, database architecture design, and creating neat, interactive frontend UI layouts.

DevOps & Server Management

Linux server administration, Nginx/Apache configuration, CI/CD pipelines, VPN setup, reverse proxy, and infrastructure automation.

SIEM & SOC Operations

Threat monitoring with Wazuh SIEM, Suricata IDS, YARA detection rules, incident response, and security operations center workflows.

Career Path

Work Experience

IT Security & Server Admin

PT Menara Agung
2023 – Present

Directing IT system security architectures and server infrastructure operations. Key operations include:

  • ISO 27001 Compliance: Maintained compliance documentation, conducted regular vulnerability assessments, and aligned organizational workflows with Annex A controls.
  • Incident Response: Formulated incident response protocols and successfully resolved active network threats and firewall alerts.
  • Linux Server Administration: Deployed, monitored, and hardened core Linux servers (Ubuntu/CentOS) hosting critical enterprise workloads.
  • Sangfor AF Firewall Management: Engineered perimeter security policies, web application firewall rules, and VPN pathways.
  • Full-Stack Deployments: Configured secure CI/CD pipelines to deploy robust Laravel applications with hardened database endpoints.

Project-Based Internship Data Engineer

BTPN Syariah X Rakamin Academy
Nov 2023 – Dec 2023
Jakarta, Indonesia · Remote

Project-based internship focused on data engineering practices in a Sharia banking environment.

  • Data Modeling: Designed and optimized data models for enterprise-scale banking datasets.
  • Business Acumen: Translated business requirements into technical data pipeline specifications.
  • ETL Pipelines: Built and maintained data extraction, transformation, and loading workflows.

Programmer Odoo (Bootcamp)

HashMicro
Jul 2022 – Sep 2022
Jakarta, Indonesia · Remote

Intensive bootcamp program focusing on Odoo ERP development and version control workflows.

  • Odoo Development: Customized Odoo modules for business process automation.
  • Git Workflow: Practiced branching strategies, pull requests, and collaborative code review.

Implementasi ERP

PT Andromedia
Aug 2021 – Feb 2022
Surabaya, East Java · Remote

Internship focused on ERP system implementation and enterprise business process mapping.

  • ERP Implementation: Deployed and configured ERP modules for client organizations.
  • ERD Design: Created Entity Relationship Diagrams for database architecture planning.
  • Business Process Analysis: Mapped client workflows to ERP system requirements.
Portfolio

Featured Projects

Blade
Web Application

Sistem Manajemen Kolam

Swimming pool management system with booking, scheduling, and facility management features built with Laravel.

Laravel Blade MySQL
Blade
Web Application

Sistem Kolam Renang

Full-featured swimming pool facility system with member registration, lane booking, and payment tracking.

Laravel Blade Bootstrap
Blade
Web Application

Sistem Masjid

Mosque management system for donation tracking, event scheduling, and community announcements.

Laravel Blade MySQL
TypeScript
Frontend App

Meme Generator

Interactive meme generator built with TypeScript. Create, customize, and download memes with text overlays.

TypeScript HTML5 Canvas CSS3
Markdown
Documentation

Materi IT

Comprehensive IT learning materials covering networking, security, programming fundamentals, and DevOps practices.

Documentation IT Security Networking
HTML
Portfolio

Portfolio Website

Personal portfolio website showcasing DevSecOps projects, certifications, and professional experience with Supabase integration.

HTML CSS JavaScript Supabase
Documentation

Project Documents

Loading documents...

Expertise

Technical Skills

Domain Competence

Integrating solid software development techniques with thorough network security engineering. Here is an overview of my core skills, reflecting hours of hands-on build-out, server configurations, and system defenses.

Nginx Apache Cybersecurity SQL Optimizations Sangfor AF Ubuntu/CentOS Git Flow MVC Architecture
Laravel / PHP 90%
Linux Server Admin 85%
ISO 27001 Information Security 80%
Firewall (Sangfor AF) 78%
PostgreSQL / Relational Databases 85%
Git Version Control 92%
Credentials

Certifications & Training

AWS

AWS re/Start Graduate

Amazon Web Services (AWS)

Oct 2025
AWS

AWS Educate Machine Learning Foundations

Amazon Web Services (AWS)

Jul 2025
ITS

IT Security (Professional Academy)

Digital Talent Scholarship

Oct 2024 · Expires Oct 2029
EHT

Ethical Hacker Training Program

Dicoding Indonesia

Sep 2024 · Expires Sep 2027
JKP

Belajar Jaringan Komputer untuk Pemula

Dicoding Indonesia

Sep 2024 · Expires Sep 2027
ITS

IT Security (Professional Academy)

Digital Talent Scholarship

Jun 2024 · Expires Jul 2030
CyA

CyberOps Associate

Cisco

Jun 2024 · Expires Jul 2033
KC

Cyberops

Kominfo

Jul 2024 · Expires Aug 2029
DvO

DevOps (Professional Academy)

Digital Talent Scholarship

Mar 2024
DvN

DevNet Associate

Cisco

Mar 2024
ML

Belajar Machine Learning untuk Pemula

Dicoding Indonesia

Nov 2023 · Expires Nov 2026
PY

Belajar Analisis Data dengan Python

Dicoding Indonesia

Oct 2023 · Expires Oct 2026
DS

Belajar Dasar Data Science

Dicoding Indonesia

Sep 2023 · Expires Sep 2026
DB

Oracle Database

Kominfo

Sep 2023 · Expires Aug 2028
HS

Memulai Pemrograman dengan Haskell

Dicoding Indonesia

Sep 2023 · Expires Sep 2026
SW

Memulai Dasar Pemrograman untuk Menjadi Pengembang Software

Dicoding Indonesia

Aug 2023 · Expires Aug 2026
GH

Belajar Dasar Git dengan GitHub

Dicoding Indonesia

Aug 2023 · Expires Aug 2026
SQL

Belajar Dasar Structured Query Language (SQL)

Dicoding Indonesia

Aug 2023 · Expires Aug 2026
JS

Belajar Dasar Pemrograman JavaScript

Dicoding Indonesia

Jun 2021 · Expires Jun 2024
AWS

Cloud Practitioner Essentials (Belajar Dasar AWS Cloud)

Dicoding Indonesia

Apr 2021 · Expires Apr 2024
DT

Memulai Pemrograman Dengan Dart

Dicoding Indonesia

Jan 2021 · Expires Jan 2024
PY

Memulai Pemrograman dengan Python

Dicoding Indonesia

Oct 2020 · Expires Oct 2023
SOL

Belajar Prinsip Pemrograman SOLID

Dicoding Indonesia

Aug 2020 · Expires Aug 2023
WEB

Belajar Dasar Pemrograman Web

Dicoding Indonesia

Aug 2020 · Expires Aug 2023
VIZ

Belajar Dasar Visualisasi Data

Dicoding Indonesia

Jul 2020 · Expires Jul 2023
DvO

Belajar Dasar-Dasar DevOps

Dicoding Indonesia

Jun 2023 · Expires Jun 2026
Get In Touch

Contact Me

Let's start a conversation

Interested in collaborating, seeking an audit assessment, configuring secure server architectures, or hiring for custom full-stack solutions? Feel free to send a message.

Document