DetectionEngineeringPortfolio
repo ↗Sigma, KQL, SPL, YARA-L/YARA mapped to MITRE ATT&CK (endpoint, cloud, container, identity, network). LLM CTI → hunt pipeline, SOAR phishing-response playbooks, pytest + CI validation.
SYSTEM ONLINE // SOC + BOUNTY NODE // @aloc999
aloc999 — Hashemi Rafsanjani
Cybersecurity Researcher · Bug Bounty Hunter · Threat Analyst · Software Research Engineer
SOC / DFIR•Bug Bounty•OSINT•Cloud•AI Red Team
“security_first · intelligence_led · continuous_improvement”
Intigriti
Bugcrowd
Banking SOC 5Y
Kendal, Central Java, ID
- 0 Years banking SOC
- 0 Alerts / shift triaged
- 0 Certifications
- 0 Security tools shipped
- 0 Pentest skills codified
- 0 Public repos
01 Impact Board
5 years banking SOC · 2 bounty platforms · 5 tools shipped · SOC shifts first, findings second, shipped tooling third
Aug 2025 — Present
Security Researcher — Intigriti
Bug Bounty Platform
Web/API pentest on live programs — recon, vuln ID, PoC validation. Severity + business-impact validation, remediation guidance, responsible disclosure within SLA.
Aug 2025 — Present
Security Researcher — Bugcrowd
Bug Bounty Platform
Continuous hunting — attack-surface mapping, recon automation, auth/logic testing. Triage + retest, scope tracking for new attack surface.
Feb 2021 — Dec 2025
IT Security Operations — PT Bank Syariah Indonesia Tbk
24/7 Banking SOC
~50 alerts/shift triage, FP tuning, Splunk + Sentinel + Defender EDR, VT/AbuseIPDB/MISP, phishing/malware forensics, MITRE ATT&CK reporting, OSINT + dark-web monitoring.
02 Research & Methodology
36 vuln classes · 147 pentest skills · methodology that feeds live hunts — recon to PoC
No repos match your filter.
03 Blue Team — Detection Engineering
Detection-as-code across Splunk / Sentinel / Chronicle · proven in 24/7 banking SOC
24/7 SOC — Bank Syariah Indonesia
~50 alerts/shift triage, false-positive tuning, severity classification. Daily handover + weekly CTI summaries. Splunk + Sentinel + Defender EDR, enriched with VirusTotal, AbuseIPDB, MISP.
Feb 2021 — Dec 2025DevSecOpsPortfolio
Zero-trust platform — Jenkins, SonarQube, Xray + Snyk, SBOM/Cosign, Terraform + Ansible, SAST/DAST/secrets/IaC with CIS/NIST/PCI mapping.
Open repo ↗04 Offensive Tooling
I don't only hunt — I build the machinery too. Authorized testing only.
05 Shipped / Builds
I don't only break things — I ship production SaaS too.
FEATURED BUILD · PRODUCTION SAAS TRIO
TicketMind · Snaplink · Invoicely
Production Next.js 15 + Prisma + PostgreSQL trio: TicketMind (AI support desk — RBAC, auto-classification, draft replies, analytics), Snaplink (URL shortener — REST API, click dashboards), Invoicely (multi-tenant invoicing — org-scoped data, plan limits, printable docs).
- Next.js 15
- TypeScript
- Prisma
- PostgreSQL
- Tailwind
- REST API
QARonin SDET monorepo
RoninShop SUT — Playwright-TS/C#, Cypress, Selenium 4, Appium 2, Karate, Behave, pytest + Newman; Pact, self-healing locators, k6/Locust SLOs, sub-30-min 4-shard gate.
View source ↗Live CV
Terminal-style printable CV — same #00ff9c / #00d4ff on #05080f palette as this site. A4, PWA-ready, offline-capable.
Open to bounty collabs + SOC / CTI work
This site — aloc999.github.io ↗06 Certifications
20+ certs · red team · blue team · governance — full list on CV
Red Team · Offensive
- CRTS — CyberWarfare Labs · Apr 2026
- Offensive Phishing Operator · Apr 2026
- Multi-Cloud Red Team Analyst · Mar 2026
- Web Red Team Analyst · Mar 2026
- Cybernetics Pro Labs — HTB · Jan 2026
- CRTA · Dec 2025
- API Red Team Analyst · Dec 2025
- Associate Pentester — Hackviser · Dec 2025
Blue Team · CTI · DFIR · OSINT
- CSI Linux Investigator · Jan 2026
- Threat Intel & Governance · Jan 2026
- Chinese OSINT — Hacktoria · Jan 2026
- DFIR Foundations · Jan 2026
- Hands-On KQL · Jan 2026
- ICS Vulnerabilities (21OW-07) — DHS · Jan 2026
- CTI Analyst — arcX · Dec 2025
- Blue Team Junior Analyst · Dec 2025
- Advanced OSINT Mastery · Mar 2026
Governance · AI · Privacy
- ISO 42001 Lead Auditor (AIMS) · Jul 2026
- ISO 27701 Lead Auditor (PIMS) · Jul 2026
- ISO 27001 Lead Auditor · Dec 2025
- CSCSO / CRPO — ICTTF · Dec 2025
- Google Cybersecurity Pro · Dec 2025
- AML/CFT (APU PPT) · Oct 2022