Government2024 - Present
Pajak Online Jakarta
BAPENDA Jakarta
Sinar12
Migrated the online tax system backend from PHP Laravel to Node.js with Knex and Oracle Database.
Node.jsExpress.jsKnex.jsOraclePostmanHCP
I'm Bayu
Nur Angga
Available for Work
Get To Know Me
About Me
9+
Years Experience
25+
Projects
15+
Clients Handled
Hi! I'm Bayu Nur Angga
Software Engineer | Ex-AppSec Consultant (Snyk Partner)
A software engineer with 9+ years of experience, currently focused on backend engineering and application security. Has built and maintained systems for government agencies, national banks, insurance companies, and private clients - designing databases, building and integrating APIs, and keeping production systems reliable.
Brings a solid background in Application Security from serving as a Technical Consultant at a Snyk partner - conducting vulnerability assessments, integrating security scanning into DevSecOps pipelines, and applying OWASP Top 10 mitigation strategies.
Holds a Master's Degree (S2) in Teknik Informatika from Universitas Pamulang (2026), focusing on Cybersecurity & Digital Forensics. Outside of work, as Co-Founder of TRIDI (Transformasi Digital Insani), a tech learning community in Tangerang Selatan.
What I Know
My Skills
// Programming Languages
// Core Expertise
REST APIs, server-side logic, and third-party / internal system integration.
Responsive web interfaces and dashboards.
Relational and NoSQL database design, queries, and integration, ETL pipelines, and S3-compatible object storage.
Version control, automated pipelines, containerization, container registries, and Kubernetes cluster management.
Hosting, deployment, and backend-as-a-service platforms.
SAST/DAST scanning in CI/CD pipelines, web vulnerability testing, and OWASP Top 10 mitigation.
// Soft Skills
- Project Team Leadership
Has led developer teams at the project level - mapping each member’s strengths, delegating technical tasks, and keeping delivery on schedule.
- Mentoring & Teaching
Shares knowledge & discussions and workshops at the TRIDI tech community.
- Emotional Intelligence
Works with empathy, reads team dynamics, and helps keep developers motivated.
- Conflict Resolution
Bridges technical disagreements, such as architecture or approach debates, toward the best solution for the project.
- Analytical Problem Solving
Breaks down complex backend systems, performance issues, and security vulnerabilities to find root causes and effective fixes.
- Decision Making
Weighs technical trade-offs objectively to choose solutions that hold up in the long term.
- Adaptability
Picks up new tech stacks and adjusts to shifting business priorities.
- Working Under Pressure
Stays calm and focused while handling critical incidents such as system outages or urgent issues.
- Stakeholder & Client Communication
Explains technical architecture and security risks in clear business terms for clients and management.
- Cross-Functional Collaboration
Works closely with product managers, UI/UX designers, and business teams to keep the product aligned.
- Team Collaboration
Builds a supportive engineering team environment through clear, transparent, and assertive communication.
- Time Management & Prioritization
Handles multiple concurrent client assignments while keeping each one on schedule.
- Continuous Learning
Completed a Master’s degree while working full-time and keeps up with new technologies and security practices.
Where I've Worked
Work Experience
9+ years · Government · Banking · Insurance · Retail · Enterprise
Backend Programmer
CurrentPT Sinar12 Bukit Barisan
Retail · Information Technology
Aug 2024 - Present
Bogor, Indonesia
Builds and maintains backend systems for the company's own brands and its clients - REST APIs, third-party system integrations, and containerized deployments with Docker, Harbor, and Rancher.
JavaSpring BootHibernateJPALombokREST APIPostgreSQLApache VelocityMinIOSwagger+9 more
3PL Courier System
SR12 Skin Care & Sinar12
API integration with third-party courier and logistics providers to automate shipment management and package tracking.
JavaSpring BootHibernateJPALombokREST APIPostgreSQLApache VelocityMinIOSwaggerPayment Gateway
SR12 Skin Care & Sinar12
Payment API integration for the SR12 e-commerce platform, supporting multiple payment methods.
JavaSpring BootHibernateJPALombokREST APIPostgreSQLApache VelocityMinIOPostmanERP System
Putikayo International
Backend services for an ERP system that manages the company's operations and business workflows.
JavaSpring BootHibernateJPALombokREST APIPostgreSQLApache VelocityCamundaMinIOSwaggerCommunity App
Muhammadiyah
Backend services for a community app, including member dues management.
JavaSpring BootHibernateJPALombokREST APIPostgreSQLApache VelocityMinIOSwaggerHR Payroll & Attendance System
CMM Group
Backend services for a web and mobile payroll and attendance system.
JavaSpring BootHibernateJPALombokREST APIMySQLMinIOSwaggerJob Vacancy Portal
CMM Group
Backend services for managing job vacancies and applicants.
JavaSpring BootHibernateJPALombokREST APIMySQLMinIOSwaggerPajak Online Jakarta
BAPENDA Jakarta
Migrated the online tax system backend from PHP Laravel to Node.js with Knex and Oracle Database.
Node.jsExpress.jsKnex.jsOraclePostmanHCPSR12 University
SR12 Skin Care
Backend services for managing SR12's partner business school.
JavaSpring BootHibernateJPALombokREST APIMySQLSentryMinIOSwagger
Programmer
PT Pro Sistimatika Automasi (PROSIA)
IT Software · Information Technology
Jul 2022 - Jul 2024
Jakarta, Indonesia
Delivered systems for government agencies and an insurance company - from REST APIs and ETL pipelines to leading a backend team - and served as a Technical Consultant for Snyk application security.
JavaSpring BootMyBatisREST APIPostgreSQLOraclePHPCodeIgniterZendLaravel+7 more
Customs-Excise Information System and Automation (CEISA Lite)
Team Lead & Backend ProgrammerDJBC (Directorate General of Customs and Excise)
Led the backend team building CEISA Lite, DJBC's contingency system that keeps customs and excise services running during disruptions.
- Designed REST APIs and backend modules with Java Spring Boot, PostgreSQL, and Oracle
- Shaped the application architecture and core business logic
- Ran system integration testing (SIT) and user acceptance testing (UAT)
JavaSpring BootMyBatisREST APIPostgreSQLOracleGovernment Information Systems
BASARNAS (National Search and Rescue Agency)
Developed and maintained several information systems supporting national search and rescue operations.
- Simonev - built REST APIs with CodeIgniter and cURL for scheduled monitoring & evaluation jobs
- SiBinpot - developed features, fixed bugs, and optimized validation; maintained client and server sides; data cleansing & ETL with Pentaho
- Rescue LAPMAS (public reports) - integrated data across Rescue 115, Rescue Mobile, and Rescue WhatsApp Chat via REST API; built a data management dashboard with Laravel
- IDRB - built registration and verification of beacon data for aircraft, vessels, and personal beacons
- Took part in SIT and UAT across all projects
PHPCodeIgniterZendLaravelREST APIOraclePentahoActuarial System
Jasa Raharja Putera (Insurance)
Built an actuarial system from scratch for insurance premium and risk calculation.
- Built REST APIs and stored procedures
- Developed ETL processes for actuarial data
PHPCodeIgniterREST APIPostgreSQLSnyk Application Security
Technical Consultant - Application SecurityEnterprise clients
Presented Snyk's security and code-quality platform - Open Source (SCA), Code, Container, IaC, and Cloud - to enterprise clients.
- Supported proof-of-concept (PoC) engagements
- Helped integrate Snyk into clients' CI/CD pipelines
- Benchmarked Snyk against SonarQube, StackHawk, Fortify, and GitLab Security; used Burp Suite for web security testing
SnykSCASASTContainer SecurityIaCCI/CD
Programmer
PT Bank Syariah Indonesia (formerly Bank Syariah Mandiri)
Banking · Human Capital
Apr 2017 - Jul 2022
Jakarta, Indonesia
Designed and built the bank's in-house Human Capital systems - employee data, attendance, payroll, and recruitment - and owned them end to end through testing, deployment, and maintenance, continuing through the merger into Bank Syariah Indonesia.
PHPJavaScriptjQueryHTMLCSSMySQLBootstrap
SIK - Sistem Informasi Kriya
Bank Syariah Mandiri
Employee information system covering data management, attendance, overtime, leave, payroll, and performance evaluation, plus master data and reporting.
PHPJavaScriptjQueryHTMLCSSMySQLRecruitment Monitoring System
Bank Syariah Mandiri
Tracks hiring from department requests through assessment to selection results, with a monitoring dashboard and candidate search.
PHPJavaScriptjQueryBootstrapHTMLCSSMySQLTAD Employee Management System
Bank Syariah Indonesia
Management system for outsourced (TAD) employees - employee data, attendance, overtime, and leave, plus master data and reporting.
PHPJavaScriptjQueryBootstrapHTMLCSSMySQL
Academic Background
Education & Research
Master's Degree (S2)
Graduated 2026Teknik Informatika
Peminatan: Cybersecurity & Digital Forensics
Universitas Pamulang
Tangerang Selatan, Indonesia
- Specialization in Cybersecurity & Digital Forensics
- Thesis on OWASP Top 10 & Hybrid AppSec Testing
- Combining SAST and DAST methodologies
- Framework for enterprise vulnerability detection & mitigation
CybersecuritySASTDASTHASTOWASP Top 10:2025AppSecResearch
Bachelor's Degree (S1)
Graduated 2021Teknik Informatika
Universitas Pamulang
Tangerang Selatan, Indonesia
- Thesis on an Internship Information System (Kriya)
- Internship data management
- Time management - attendance, overtime & leave
- Payroll data processing
Information SystemsTime ManagementPayrollDatabase DesignWeb Development
Publications & Research
Komparasi Algoritma Decision Tree, K-Nearest Neighbors (KNN) dan Naïve Bayes pada Pengobatan Penyakit Kutil Menggunakan Cryotherapy
PROKASHADIK: Prosiding Kecerdasan Artifisial, Sains Data, dan Pendidikan Masa Depan
December 30, 2023
Machine LearningKNNNaïve BayesDecision TreeResearch
My Portfolio
Featured Projects
Systems I've built for government agencies, banks, insurers, and businesses, plus my academic research. Most are proprietary client systems, so their source code isn't public.
Application Security2022 - 2024
Snyk Application Security
Enterprise clients
PROSIA
Technical Consultant - Application SecurityPresented Snyk's security and code-quality platform - Open Source (SCA), Code, Container, IaC, and Cloud - to enterprise clients.
SnykSCASASTContainer SecurityIaCCI/CD
Application Security2026
Hybrid Application Security Testing Framework
Master's Thesis (M.Kom.)
Universitas Pamulang
A framework for detecting and mitigating web application vulnerabilities based on the OWASP Top 10, combining SAST and DAST in a hybrid testing approach.
OWASP Top 10SASTDASTHybrid AST
Let's Talk
Get In Touch
Have a project in mind, want to collaborate, or just say hello? I'd love to hear from you. Let's build something great together.
// Contact Information
Currently Open to Opportunities
Open to freelance projects, full-time roles, consulting engagements, and mentoring collaborations. Response time is typically within 24 hours.