Security Engineer & Product Builder
Wahid Hendrawan
Detection engineering, threat hunting, DFIR, threat intelligence, vulnerability management, and secure infrastructure.
Profile
Security engineer and open-source product builder based in Indonesia. Builds practical tooling across detection engineering, threat hunting, incident investigation, threat intelligence, vulnerability management, and infrastructure automation.
Core expertise
Selected work
836 rules across 9 platforms with coverage for 152 MITRE ATT&CK techniques.
Log, PCAP, and memory analysis with Sigma correlation, playbook assistance, and secured administration.
Converts YARA intelligence into Sigma and native SIEM/EDR queries across seven backends.
Centralizes threat intelligence, analyst context, and hunting-led security workflows.
Technology
Python, TypeScript, JavaScript, Flask, Docker, Sigma, YARA, KQL, SPL, Terraform, OpenTofu, Pulumi, Helm, PowerShell, Linux.
Working principles
Operational usefulness, portable architecture, clear evidence, inspectable systems, and continuous iteration.