Skip to content
Cybersecurity Portfolio — 2026
Open to remote opportunities

MuhammadFarhan Syadwi

Cybersecurity Analyst & Penetration Tester

I find what attackers look for — before they do. Specialized in web application penetration testing, enterprise threat detection, and security operations across 20+ corporate systems in Indonesia.

Get in TouchSee Work
  • Offensive Security
  • Defensive Security
  • Network & Infrastructure
  • Tools & Certifications
  • CEH v13
  • Burp Suite
  • Kali Linux
  • OWASP Top 10
01 /

Selected Work

02 projects
012025
Web application penetration testing dashboard showing vulnerability findings at PT Acset Indonusa

Enterprise Web Application VAPT

Lead Penetration Tester

PT Acset Indonusa's 20+ internal web applications — handling everything from HR records to project financials — had never been formally tested for security. The exposure was invisible, but the risk was real and growing.

ImpactUncovered critical IDOR and Broken Access Control vulnerabilities that let any authenticated user access other users' sensitive data. Every finding was documented with a severity rating and concrete remediation steps, then handed directly to the engineering team for immediate patching.

  • VAPT
  • IDOR
  • Broken Access Control
  • Burp Suite
  • Web Security
022025
Phishing simulation campaign dashboard showing employee click rates and training outcomes

Phishing Simulation Program

Security Awareness Lead

The organization had no baseline on employee susceptibility to phishing — no simulations, no metrics, no training program. In a threat landscape where most breaches start with a human, this was a significant blind spot.

ImpactDesigned and executed multi-wave phishing campaigns — common lures and targeted spear phishing — across the entire organization. Tracked real click rates, reported findings to leadership, and used the data to build a targeted security awareness program that measurably reduced the human attack surface.

  • Phishing
  • Social Engineering
  • Security Awareness
  • Incident Response
02 /

Capabilities

04 domains
01Offensive Security
  • Web Application Penetration Testing
  • Vulnerability Assessment (VAPT)
  • OWASP Top 10 / IDOR / Broken Access Control
  • Manual Testing & HTTP Request Manipulation
  • Burp Suite, Kali Linux, Nmap, Metasploit
02Defensive Security
  • Threat Detection & Alert Monitoring
  • Trend Micro XDR (Endpoint, Email, Network)
  • Incident Response (Level 1)
  • Log Analysis & Threat Hunting
  • Phishing Simulation & Email Security
03Network & Infrastructure
  • TCP/IP, Routing & Switching
  • Firewall Configuration (Cisco & Huawei)
  • Network Traffic Analysis
  • Enterprise Network Monitoring
  • Cisco IOS, Huawei VRP
04Tools & Certifications
  • CEH v13 — EC-Council (2026)
  • CyberOps Associate — Cisco
  • CCNAv7 Enterprise & Switching
  • Python (scripting & automation)
  • Wireshark, Trend Micro, Burp Suite
03 /

Experience

05 roles
  1. Aug 2025 — Present

    IT Security Analyst · PT Acset Indonusa Tbk

    Leading full-scope VAPT engagements across 20+ internal web applications — surfacing critical IDOR, Broken Access Control, and authentication flaws with documented severity ratings and remediation guidance. Running continuous threat monitoring via Trend Micro XDR across endpoint, email, and network layers. Executing multi-wave phishing simulations and delivering biweekly threat intelligence reports to senior management.

  2. Jan 2025 — Aug 2025

    Network Engineer · PT Berca Hardayaperkasa (onsite: Bank Mandiri IT Digital)

    Kept nationwide network infrastructure running for one of Indonesia's largest banks — monitoring uptime, triaging connectivity issues across hundreds of branches, and resolving outages at first contact. Maintained routers, switches, and firewalls in a zero-downtime, high-stakes environment where every minute of disruption has measurable impact.

  3. Sep 2024 — Dec 2024

    Network Engineer · PT Nusantara Compnet Integrator

    Configured and deployed enterprise-grade Cisco network infrastructure for corporate clients. Monitored traffic for anomalies, applied security hardening measures, and maintained audit-ready documentation for all network configurations and changes.

  4. Aug 2023 — Jan 2024

    Machine Learning Cohort · Bangkit Academy — Google, Tokopedia, Gojek, Traveloka

    Completed an intensive ML program backed by Google, Tokopedia, Gojek, and Traveloka — covering TensorFlow, Python automation, and data analytics. Capstone: an end-to-end ML application predicting rice field harvest schedules, built and shipped as part of a cross-functional product team.

  5. Aug 2022 — Jan 2023

    Cybersecurity Analyst Intern · Kementerian Komunikasi dan Informatika (Kominfo)

    Government-backed cybersecurity training under the Digitalent Scholarship — covering CyberOps Associate, CCNA Networking, Kali Linux, and network security fundamentals. The foundation that now drives real-world threat detection and penetration testing work.