Brigham Young University

Institut Teknologi Bandung

Security Engineer at Gojek

- Managed security operations across a diverse portfolio of 50+ cloud accounts, including AWS, GCP, Ali, and Azure.
- Lead the unification of security solutions across all accounts, optimizing processes and reinforcing the organization's security framework.
- Demonstrated financial acumen by implementing strategic initiatives that led to a notable x% reduction in security tool expenditures

GoTo Group

Cloud Security

- Revamped the deployment workflow throughout GoPay, introducing a streamlined and traceable process that enhanced efficiency and accountability.
- Instituted robust security defaults for provisioning cloud resources, fortifying the organization's cloud infrastructure against potential vulnerabilities.

Head of Information Security - Consumer Payment

- Designed and implemented a robust Secure Development Lifecycle (SDLC) framework for Gopay, ensuring the seamless integration of security measures at every phase of software development.
- Orchestrated thorough penetration testing exercises, meticulously identifying and addressing vulnerabilities within the organization's systems and applications.
- Played an integral role in regulatory and ISO 27001 audits, providing essential insights and contributing to the successful compliance and adherence to industry standards.

Lead Security Engineer

- Performed dynamic penetration testing and proactive vulnerability management efforts, uncovering and remediating security gaps to strengthen system resilience.
- Managed the orchestration of a public bug bounty program, harnessing external expertise to amplify the organization's threat identification and resolution capabilities.
- Lead the development of an in-house cloud security intrusion detection system, harnessing cutting-edge technology to bolster real-time threat recognition and response.
- Innovated by architecting proprietary tools, including an in-house solution for detecting sensitive information within GitLab repositories and cloud resources, effectively enhancing data security and adherence to best practices.

Fahri Shihab