VALDEZ
BENTIRAZ

Informatics Graduate — Aspiring SOC Analyst

Bandung, Indonesia · open to security roles

Blue-team focused. I build detection-minded tools, practice alert triage and log analysis, and write findings people can reproduce and fix.

GitHub LinkedIn Contact Download CV

Pixel-art portrait of Valdez Bentiraz in plum Mount Hua robes

About

About

I am an Informatics graduate from Telkom University (GPA 3.94/4.00) with a focus on cybersecurity and a strong interest in Security Operations Center (SOC) and blue-team work. My practical experience spans a Wazuh SIEM home lab (Windows telemetry, alert triage), web application security assessment, security-audit coursework (ISO/IEC 27001, ISO 19011), digital forensics research, and applied cryptography.

I have trained through the LetsDefend SOC Analyst learning path and TryHackMe, and I am the author of an IEEE-accepted paper on lightweight cryptography for IoT devices. Two-time national GEMASTIK CTF competitor (representing Telkom University), and an ADIKARA CTF finalist.

Skills

Skills

Security Operations
Wazuh SIEM lab (Windows Event Log, Sysmon, file integrity monitoring), alert triage and false-positive analysis; MITRE ATT&CK mapping practice.
Security Assessment & Forensics
Web vulnerability assessment (OWASP Top 10, grey-box testing) and CVSS 3.1 scoring with reproducible PoCs; digital forensics coursework (FTK Imager disk imaging, SHA-256 integrity verification, timeline reconstruction); information security audit coursework (ISO/IEC 27001:2022, ISO 19011:2018).
Cryptography & IoT
Lightweight/applied cryptography (ASCON, ACORN), embedded security on ESP32, MQTT protocol, performance benchmarking.
Programming
Python, Dart, SQL (Java and C++ from coursework).
Frameworks & Tools
Wazuh, Sysmon, Docker/WSL2, Flutter, Laravel, React + TypeScript, Git, Firebase, MySQL, PostgreSQL.

Experience

Experience

Security

  1. Vulnerability Researcher — Coordinated Disclosure Program

    Public-sector system · Sep–Oct 2026 · Under confidentiality agreement

    • Participated in a coordinated vulnerability disclosure (CVD) program for a public-sector electronic system, under an agreed scope, rules of engagement, and confidentiality agreement.
    • Identified and reported a HIGH-severity CSRF vulnerability (CVSS 3.1: 8.1) affecting destructive document actions, supported by a reproducible proof-of-concept; the report was submitted and validated through the official program platform.
    • Verified application controls against common web vulnerability classes and produced clear, reproducible finding reports.

  2. Security Manpower Training (SMT) Program Indonesia 2026

    Online Training · KISIA & NSHC · Aug–Sep 2026

    • Completed the online cybersecurity training curriculum covering OS, web, network, and malware security, cryptography, forensics, and VAPT methodology.
    • Performed an authorized grey-box VAPT engagement under strict rules of engagement, delivering a professional English report with findings, proof-of-concept, and remediation.
    • Produced a bilingual (English/Indonesian) sales kit for an industry security product.

  3. Participant — Information Security Audit Class

    Cisometric Academy · Bandung · Feb–Jun 2025

    • Trained in auditing management systems under ISO 19011:2018 guidelines and conducting audits aligned with ISO/IEC 27001:2022 information security standards.
    • Practiced audit planning, evidence gathering, and non-conformity reporting for information security management systems (ISMS).

  4. Research Member — Digital Forensics

    Forensic & Security Laboratory · Bandung · Oct 2023–Dec 2024

    • Researched anti-anti-digital-forensic techniques — methods used to evade forensic investigation and how investigators detect and counter them.
    • Explored artifact recovery, data-hiding detection, and forensic soundness in evidence handling.

  5. CTF Competitor — GEMASTIK & ADIKARA

    GEMASTIK 2023–2024 · ADIKARA 2024

    • Represented Telkom University at the national GEMASTIK CTF (2023 & 2024).
    • Finalist of ADIKARA CTF 2024 (internal Telkom competition), competing across web exploitation, forensics, and cryptography.

Professional

  1. Software Developer Intern

    PT Sarana Multi Infrastruktur (Persero) · Jakarta · Jun–Aug 2025

    • Built end-to-end modules with Laravel (backend) and React + TypeScript (frontend), collaborating with the Product Manager and senior engineers.
    • Participated in requirements gathering, analysis, and sprint reviews, gaining hands-on Agile experience relevant to secure SDLC.

  2. Member — Mobile Development Division

    GDGoC Telkom University · Bandung · Dec 2024–Jun 2025

    • Built mobile apps with Flutter & Dart; hands-on with UI design, Git collaboration, and Firebase backend integration.

  3. Teaching Assistant — Programming Algorithms

    Universitas Telkom · Bandung · Jan–Jun 2024

    • Assisted students with algorithmic problem solving and programming fundamentals.

Projects

Projects

Click any card to open an interface preview.

Security & Forensics

  • Home Lab — Wazuh SIEM & SOC

    Single-node Wazuh 4.14.9 (Docker/WSL2) with a Windows 11 + Sysmon endpoint; reviewed ~2,400 alerts, triaged a selected sample, and documented a workflow.

    Wazuh · Sysmon · SIEM · Triage

    View interface →

  • Polyglot DevSecOps CVE Scanner

    Python CLI that scans PyPI and npm dependencies against OSV.dev, classifies CVSS severity, auto-patches, and pushes HIGH/CRITICAL alerts to Discord.

    Python · OSV.dev · CVSS · ChatOps

    View interface →

  • Insider Data-Breach Forensic Investigation

    Forensic analysis of a simulated insider data-breach case: USB disk image (FTK Imager), SHA-256 integrity, and incident timeline from chat-log evidence.

    Digital Forensics · FTK Imager · Hashing

    View interface →

  • Vulnerable Web Application Exploitation Lab

    Exploited SQL injection and path traversal in deliberately vulnerable Flask/PHP/SQLite apps; compared insecure vs secure implementations.

    AppSec · SQLi · Path Traversal

    View interface →

  • ADIKARA CTF Writeups

    Public writeups across cryptography (RSA factoring), binary exploitation, forensics, polyglot files, and OSINT from ADIKARA 2024.

    CTF · Writeups · Forensics · Crypto

    View interface →

  • Information Security Audit Program (ISO 27001 & PCI DSS)

    Designed an annual audit program for a payment-gateway company covering ISO/IEC 27001:2022, PCI DSS, internal audit, and management review.

    ISO 27001 · PCI DSS · GRC

    View interface →

  • IoT Time-Series Anomaly Detection

    Anomaly detection on IoT sensor data with imputation, Prophet decomposition, and LSTM / Random Forest / XGBoost models.

    Python · LSTM · RF · XGBoost

    View interface →

Software & Other

  • AI Desa — OCR Kartu Keluarga

    Village-administration app (Laravel + web) that extracts family-card data via OCR and manages Desa/RW/KK records through a token API.

    Laravel · Sanctum · NativePHP · OCR

    View interface →

  • ManajemenBisnis

    Multi-branch business-management app (Laravel Filament) with a staff → manager → owner approval workflow for finance and stock.

    Laravel · Filament · RBAC

    View interface →

  • Kadaluwarsa — Expiry Tracker

    Flutter app that tracks item expiry with a freshness ring, categories, reminders, and a bilingual UI; 104 automated tests passing.

    Flutter · SQLite · Localization

    View interface →

  • CatchU — Android App

    Flutter dating app with swipeable cards, real-time chat, and location-based discovery; Firebase auth, Firestore, and media storage.

    Flutter · Firebase

    View interface →

  • Video Scope — Chrome Extension

    Manifest V3 extension that lists videos on the current page and offers download links; network sniffing plus DOM scan.

    JavaScript · Chrome MV3

    View interface →

  • Korean Novel OCR + Translator

    Python desktop reading aid: captures a screen region, runs Korean OCR, and translates to English in an always-on-top overlay.

    Python · EasyOCR · Tkinter

    View interface →

Publications

Publications

“Performance Analysis of ASCON and ACORN Lightweight Cryptography on ESP32 with MQTT Protocol”

Undergraduate thesis benchmarking lightweight AEAD ciphers (ASCON-128, ASCON-AEAD 128, ACORN-128) on real ESP32 hardware over the MQTT protocol for resource-constrained IoT devices. Accepted for oral presentation at IEEE NetCrypt 2026 (4th International Conference on Networks and Cryptology, Jawaharlal Nehru University, New Delhi); to be indexed in IEEE Xplore.

Certifications

Certifications & Achievements

Course & training certificates — click any card to view it.

    Achievements

    • GEMASTIK CTF (2023 & 2024) — represented Telkom University (national level)
    • ADIKARA CTF Finalist (2024) — internal Telkom competition

    Now

    Now

    Sharpening blue-team skills through the LetsDefend SOC analyst path and TryHackMe, writing up CTF challenges (web, forensics, cryptography), and preparing a lightweight-cryptography study for IoT. Open to SOC, blue-team, and security-engineering roles.

    Contact

    Contact

    Based in Bandung, Indonesia. Open to SOC, blue-team, and security engineering opportunities.