Always exploring new ideas Based in Yogyakarta, Indonesia

Hi, I'm Candra

Security engineer fortifying cloud workloads, hardening web stacks, and translating complex threats into pragmatic defenses. I pair red-team curiosity with blue-team discipline to build products people can trust.

Currently available for projects

Focus areas

Cloud Security · AppSec · Threat Hunting

View portfolio

Projects

8

Real-world apps, design systems, and collaborative builds.

Certificates

21

Continuous learning across development and design tracks.

Articles

5

Documented insights, tutorials, and community stories.

Selected work

Polished digital projects

A mix of collaborative builds, hackathon prototypes, and design-led experiences crafted with care.

Paraakar

Paraakar

2025

A collaborative website project with small businesses (UMKM) in Yogyakarta, focused on building digital presence.

Laravel Vite Tailwind
Simulation UTS ABD 25

Simulation UTS ABD 25

2025

A simulation tool to help students practice for the Database Administration midterm exam.

HTML CSS
Courseop

Courseop

2025

An online course platform for computer architecture and data structures subjects.

Vite Tailwind
Experience

Work Experience

My journey in leadership, programming, and community engagement.

View core skills

Vice Coordinator & Multimedia Team

Leaders Community UAJY · Part-time

Jan 2024 - Dec 2024

Led multimedia and documentation efforts, creating designs with Canva for the "Kelas Alam" program, fostering teamwork and creative content development.

  • Designed engaging visual content for community events
  • Coordinated team efforts to ensure timely project delivery
  • Documented program activities to enhance visibility

Programming C Tutor

Kelompok Studi Pemrograman UAJY · Part-time

Jan 2024 - Present

Guided students in mastering basic to advanced C programming concepts, improving their problem-solving skills and coding proficiency.

  • Developed structured learning modules for C programming
  • Mentored students to enhance their coding capabilities
  • Facilitated hands-on coding sessions

Brand Ambassador

Gojek · Contract

Jul 2024 - Jul 2024

Promoted Gojek's services and products to increase brand awareness, engaging with communities to highlight the platform's benefits.

  • Conducted promotional campaigns to boost user engagement
  • Built relationships with local communities
  • Enhanced brand visibility through creative marketing

Field Assistant

Gerakan Pandai Bebras · Contract

Oct 2023 - Nov 2023

Supported the implementation of the Bebras initiative, introducing computational thinking to participants through workshops and activities.

  • Assisted in organizing educational workshops
  • Facilitated participant engagement in computational thinking exercises
  • Ensured smooth execution of event logistics
Core capabilities

Skills & Expertise

Technologies and skills I excel in.

Design-led development with an eye on collaboration and learning.

Technical Skills

PHP
JavaScript
Laravel
Node.js
Python
MySQL

Design Tools

Figma
Canva
Adobe Illustrator
Adobe Photoshop

Soft Skills

Creativity
Collaboration
Critical Thinking
Teamwork
Problem Solving
Communication

Technologies I Work With

continuous learning
Milestones

My Certificates

Certifications that validate my technical expertise.

Download full résumé
Fundamentals of optical character recognition Certificate
Microsoft

Fundamentals of optical character recognition

May 2025

Acquired foundational knowledge of Optical Character Recognition (OCR), including how AI extracts and interprets text from images and scanned documents. Explored common use cases such as document digitization, data entry automation, and text search in visual content.

View certificate
Fundamentals of Facial Recognition Certificate
Microsoft

Fundamentals of Facial Recognition

May 2025

Learned the core principles of facial recognition technology, including facial detection, feature extraction, and face matching. Explored ethical considerations and real-world scenarios where facial recognition is applied responsibly and securely.

View certificate
Fundamentals of Computer Vision Certificate
Microsoft

Fundamentals of Computer Vision

May 2025

Gained foundational understanding of computer vision concepts, including image classification, object detection, and facial recognition. Explored real-world applications and learned how AI models interpret and analyze visual data using pixel-based representations.

View certificate
Stories & Notes

Blogs

Insights, tutorials, and reflections on technology and design.

Pitch a story idea
Session 2, HTTP Traffic Analysis & Flood Simulation (LAB ONLY)
Security

Session 2, HTTP Traffic Analysis & Flood Simulation (LAB ONLY)

Objective: Run a simple HTTP server in Kali, capture HTTP traffic in Windows, and distinguish normal patterns...

Read article
Snort IDS Setup and Testing Tutorial
Security

Snort IDS Setup and Testing Tutorial

1. Switch to the Root UserFirst, switch to the root user to ensure you have full administrative privileges:sud...

Read article
Session 1, Introduction & Topology Setup (Kali VM ↔ Windows Host)
Security

Session 1, Introduction & Topology Setup (Kali VM ↔ Windows Host)

Objective: Set up VM topology, ensure bidirectional connectivity, and perform ICMP packet capture & analys...

Read article
Security Engineering Lab

Offensive Research, Defensive Guarantees

From reconnaissance to hardening, every engagement is scripted, replayable, and tuned to break adversarial paths before they reach production.

Kali Linux ready Continuous purple teaming
kali@candra
Documentation snapshot — launch the lab session to execute commands live.
┌──(candra㉿kali)-[~/threat-lab]
└─$ sudo nmap -sCV --min-rate 4000 10.10.40.42
PORT STATE SERVICE VERSION
443/tcp open https nginx 1.24.0 (Ubuntu)
[+] robots: /admin /shadow-login
┌──(candra㉿kali)-[~/threat-lab/recon]
└─$ python3 recon/s3_dns_takeover.py --target ops.prod
[+] Enumerating DNS zones… done (6 wildcard hosts)
[+] Bucket ops-cdn-prod exposed → policy hardened
┌──(candra㉿kali)-[~/threat-lab/scripts]
└─$ ./build-guardrails.sh --deploy gke-asia-southeast1
[+] Signed admission controller deployed
[+] 19 CIS Kubernetes controls enforced
┌──(candra㉿kali)-[~/threat-lab]
└─$ tree runtime-detections
runtime-detections/
├── blueprints/
│ └── runtime_rules.yaml
└── dashboards/
┌──(candra㉿kali)-[~/threat-lab]
└─$ kubeaudit --profile prod
[+] hostPID/hostIPC disabled — ok
[+] NetworkPolicy coverage 94%
┌──(candra㉿kali)-[~/threat-lab]
└─$ guardrails status
[guardrails] Last pipeline run ▸ 18 minutes ago
Adversary emulation Cloud blueprints Secrets hygiene
Launch threat lab session

Detection Pipeline

live
  • Sysdig + eBPF stream enriched container telemetry to a Kafka-secured lake.
  • Sigma ↦ OCSF rules auto-compile to GuardDuty and Chronicle detections nightly.
  • Response playbooks trigger SOAR workflows that patch IAM drifts within 90 seconds.
Hardening cadence

72 hrs

Average time to baseline cloud drifts after recon report is issued.

Signal-to-noise

93 %

Alert precision after correlating runtime telemetry with IaC drift signatures.

Adversary-to-Defense Bridge

Turning red-team tradecraft into guardrails.

  • Attack chains replayed in GitHub Actions with containerized tooling for reproducible evidence.
  • Guardrails pushed as Terraform modules and Kyverno policies for zero-touch delivery.
  • Stakeholder briefings shipped with exploitable PoC + mitigation diff for rapid sign-off.

Contact Me

Got a question? Send me a message, and I'll get back to you soon.

Get In Touch

Interested in collaborating or have a project in mind? Let's connect!

Send a Message

Comment (12)

Max size: 5MB

asfasdsa

2 weeks ago

<script>alert(1)</script>

aa

3 months ago

wow

qwertydvorakkk

4 months ago

bagus color waynya enak di lihat.

Candra

4 months ago

Nama kita mirip bang gas Collab gede-candra.github.io wkwkwk

Anonim

4 months ago

Hai

Febby

4 months ago

Please teach me how to get all of that certificates. I want to get that but I don’t know where to get that

noname

5 months ago

GG

Foto profil gerbang jepang

gerbang jepang

5 months ago

waow tutor dong bang jago

naga cina

5 months ago

gelokkk teman saya hebat punya loooo.....

bangboo

5 months ago

waow insecure aku brok

Si Kilat Kuning

5 months ago

Good job!

Foto profil nino

nino

5 months ago

halo gess