Aldi Setiawan

Application Security Engineer with a backend engineering foundation, building an AppSec program from the ground up across CI/CD, SCA, SAST, secure code review, and attack simulation. Strong background in mobile security and reverse engineering, with published research and offensive-security certifications. Direct, evidence-driven, and focused on secure-by-default delivery.

Application Security Engineer at PT Dipo Star Finance (2026-04 – Present)

• First dedicated AppSec hire; established the company's application security program from scratch.
• Implemented CVE monitoring, Software Composition Analysis (SCA), and SAST across the Azure DevOps CI/CD pipeline (GCR/GKE on GCP).
• Authored secure coding guidelines and led security code reviews to embed secure-by-default practices.
• Ran attack simulations against internal systems (3 systems per 2-month cycle) and produced security posture reporting for leadership.

Backend Engineer at PT Dipo Star Finance (2021-11 – 2026-04)

• Designed and maintained backend services deployed via Azure DevOps to Google Kubernetes Engine.
• Built and supported APIs and services across the company's microservice estate (20+ services).
• Gained deep system and infrastructure knowledge that later enabled the transition into application security.

M.S. in Informatics – Telkom University (2023 – 2025)

B.Eng. in Computer Engineering – Universitas Amikom Yogyakarta (2018 – 2022)