About

Muhammad Hidayat

Full-Stack Developer | Security Engineer | Penetration Tester

Profile Summary

Security Engineer and Full-Stack Developer with experience in offensive security, application security testing, vulnerability research, and secure software development. Experienced in conducting enterprise web application penetration testing, security assessments, vulnerability identification, and remediation support for improving organizational security posture.

Strong background in software engineering and cybersecurity research with practical experience in attack surface analysis, security automation, and modern backend systems. Actively expanding expertise in Machine Learning and Blockchain technologies with research interests in integrating Large Language Models (LLMs), blockchain systems, and cybersecurity applications for intelligent security solutions.

Core Competencies

Cybersecurity

• Web Application Penetration Testing
• Vulnerability Assessment & Research
• Malware Analysis & Secure Code Review
• OWASP Top 10 & Black-box Testing
• Attack Surface Analysis & Threat Intelligence

Development

• Full-Stack Development
• REST API & Microservices Architecture
• Real-Time Systems & Socket.IO
• Secure Software Development
• Machine Learning & Blockchain (Solidity)

Professional Experience

Lead Backend Engineer @ CookPal

Mar 2026 – Present

Lead backend architecture and technical implementation initiatives.
Design scalable application services and backend systems.
Develop secure and maintainable infrastructure solutions.
Coordinate backend development aligned with product requirements.

Security Engineer @ MPN Indonesia

Dec 2024 – Present

Conduct enterprise web application penetration testing and security assessments.
Identify and validate security vulnerabilities using offensive methodologies.
Collaborate with engineering teams to improve remediation processes.
Support application security improvements aligned with security standards.

Security Engineer @ Bapera News

Jun 2022 – Apr 2025

Conducted web application penetration testing using black-box methodologies.
Performed vulnerability identification and validation through attack simulations.
Assisted security posture improvement initiatives and risk reduction activities.

Full-Stack Developer @ ADICI OPS

Nov 2022 – Dec 2022

Built custom WordPress themes and responsive corporate websites.
Developed scalable frontend and backend systems.

Intern Full-Stack Developer @ Cyber Edu Inkor

May 2022 – Jun 2022

Contributed to a real-time communication system using Socket.IO and MongoDB.
Participated in full-stack development using Vue.js, Express.js, PostgreSQL, and Laravel.

Research Experience

Undergraduate Research @ Gunadarma University

Implementation of Blockchain and Large Language Models (LLM) Integration for Data Integrity Verification in Malware Analysis

Researching integration between blockchain systems and Large Language Models (LLMs).
Designing data integrity verification mechanisms for malware analysis workflows.
Exploring decentralized approaches to improve trust and immutability of cybersecurity datasets.

Leadership & Community Experience

Lead @ Cyber Community Universitas Gunadarma (CCUG)

2026

Lead and coordinate cybersecurity initiatives and technical activities.
Mentor members in penetration testing and CTF learning pathways.
Organize workshops, sharing sessions, and technical discussions.

Event Organizer & CTF Problem Setter @ Gunadarma Code Week 2.0