Back to Home

About Me

backend developer and security engineer focused on building secure, scalable software from end to end.

Hamdan Fauzaan

Indonesia

0 years

Experience

0+

Technologies

Hello, I'm Hamdan

I'm a backend Developer and Security Engineer focused on building secure, scalable software - from CI/CD pipelines to production-ready web apps. I build modern applications with NestJS, Next.js, Laravel, and PostgreSQL, and harden them with automated security scanning and DevSecOps practices. My security work covers static analysis and dependency scanning (Semgrep, Trivy), API threat modeling, vulnerability management, and secure SDLC pipelines. On the infrastructure side, I work with Docker, Kubernetes, Jenkins, and Nginx to ship and operate reliable systems.

Full-Stack Development

End-to-end web development with Next.js, React, NestJS, Laravel, Go, and PostgreSQL.

Security Engineering

DevSecOps, automated scanning with Checkmarx, Semgrep & Trivy, API threat modeling, vulnerability management, and secure SDLC.

DevOps & Infrastructure

CI/CD with Jenkins, containerization with Docker & Kubernetes, Nginx, and Linux administration.

Technical Stack

Vue.jsJavaScriptBootstrapFigmaCloudflareMySQLHTML5Google AdsMetaPHPTypeScriptReactVue.jsJavaScriptBootstrapFigmaCloudflareMySQLHTML5Google AdsMetaPHPTypeScriptReact
Google AnalyticsNode.jsPythonCSSNext.jsLaravelTailwind CSSWordPressGitSupabasePostgreSQLjQueryGoogle AnalyticsNode.jsPythonCSSNext.jsLaravelTailwind CSSWordPressGitSupabasePostgreSQLjQuery

And many more technologies I work with daily...

Experience

My professional journey in software development and security

Backend Developer

SUPERFUTUREKOMPANY · Full-time

September 2025 - Present

.

  • Designing and developing RESTful APIs using NestJS and Laravel to support frontend and mobile applications
  • Managing relational databases with MySQL and PostgreSQL, including schema design and query optimization
  • Setting up and maintaining CI/CD pipelines using GitHub Actions to automate testing and deployment workflows
  • Performing security testing (DAST) on self-developed applications and APIs using Burp Suite, identifying vulnerabilities, developing PoC scripts to validate findings, and remediating issues directly in the codebase
  • Collaborating with frontend and mobile teams to ensure smooth API integration and clear documentation

Security Engineer | Fullstack Developer | DevSecOps

Salix Scura Sanctuary [S3] · Full-time

September 2024 - September 2025

.

  • End-to-end ownership of external client-facing websites and internal company systems, handling the entire development lifecycle from planning to deployment.
  • Designed system architecture and implemented scalable, secure, and maintainable solutions using Laravel and JavaScript
  • Performed security testing (DAST) on self-developed applications using Burp Suite, developing PoC scripts to validate findings and remediating issues directly in the codebase
  • Deployed and maintained Checkmarx SAST infrastructure for a banking client, performing installation, configuration, and preventive maintenance to ensure platform availability in a regulated financial environment
  • Built responsive, user-friendly interfaces and optimized backend performance, improving load times and overall user experience
  • Provided on-site technical support and preventive maintenance for enterprise clients

Programmer

PT. Citra Utama Madani · Full-time

July 2022 - September 2024

  • Resolved medium-complexity bugs across the application stack.
  • Customized system modules and UI based on school branding and operational needs.
  • Collaborated with the development team in implementing new features for academic system templates.

Frontend Developer

Badan Tenaga Nuklir Nasional (BATAN) · Internship

February 2018 - July 2018

  • Redesigned and implemented improved UI/UX for Open Journal Systems (OJS) platform.
  • Developed responsive front-end components using HTML, CSS, and JavaScript.
  • Enhanced user navigation flow and visual design consistency.