Back to Home

About Me

backend developer and security engineer focused on building secure, scalable software from end to end.

Hamdan Fauzaan

Indonesia

0+ Years

Experiences

Hello, I'm Hamdan

I'm a backend Developer and Security Engineer focused on building secure, scalable software - from CI/CD pipelines to production-ready web apps.

I build modern applications with NestJS, Next.js, Laravel, and PostgreSQL, and harden them with automated security scanning and DevSecOps practices.

My security work covers static analysis and dependency scanning (Semgrep, Trivy), API threat modeling, vulnerability management, and secure SDLC pipelines.

On the infrastructure side, I work with Docker, Kubernetes, Jenkins, and Nginx to ship and operate reliable systems.

Full-Stack Development

End-to-end web development with Next.js, React, NestJS, Laravel, Go, and PostgreSQL.

Security Engineering

DevSecOps, automated scanning with Semgrep & Trivy, API threat modeling, vulnerability management, and secure SDLC.

DevOps & Infrastructure

CI/CD with Jenkins, containerization with Docker & Kubernetes, Nginx, and Linux administration.

Technical Stack

Vue.jsJavaScriptBootstrapFigmaCloudflareMySQLHTML5Google AdsMetaPHPTypeScriptReactVue.jsJavaScriptBootstrapFigmaCloudflareMySQLHTML5Google AdsMetaPHPTypeScriptReact
Google AnalyticsNode.jsPythonCSSNext.jsLaravelTailwind CSSWordPressGitSupabasePostgreSQLjQueryGoogle AnalyticsNode.jsPythonCSSNext.jsLaravelTailwind CSSWordPressGitSupabasePostgreSQLjQuery

And many more technologies I work with daily...

Experience

My professional journey in software development and security

backend Developer

Professional & Freelance

Building end-to-end web applications with Next.js, React, NestJS, Laravel, and PostgreSQL - from architecture to deployment.

  • Built SecOps Flow, a DevSecOps lifecycle platform with automated security scanning and compliance enforcement
  • Built DeployDash, a self-hosted deployment automation platform with real-time logs and instant rollback
  • Shipped production applications with CI/CD pipelines, Docker, and Kubernetes

Security Engineer

DevSecOps

Securing the software delivery lifecycle - automated scanning, vulnerability management, and secure SDLC enforcement.

  • Developed nest-scan, matcha, and cortado - open-source security analysis tools
  • Integrated Semgrep and Trivy scanning into CI/CD pipelines
  • API threat modeling with STRIDE mapped to OWASP API Security Top 10 (2023)