Skip to content

Muhammad Saddam Fedayeen

IT Security
& AI Engineer

Founder & CTO of AIVRA. I keep organisations safe from the attacks that start with people — and build products that stay secure under pressure.

About

I'm an IT security professional and prompt AI engineer from Jakarta. I defend the places most attacks begin — people, inboxes and endpoints — and I build software on the same principles.

I graduated in Informatics from Universitas Gunadarma. Today I handle security operations at PT. MSBU Konsultan Indonesia — investigating phishing reports, running phishing simulations and leading a company-wide security awareness program — while supporting devices and users at Renpal.

I'm also the founder and CTO of AIVRA, an all-in-one platform for restaurants and cafés that I designed and built end to end.

Based in
Jakarta, Indonesia
Currently
IT Security & Operations at PT. MSBU Konsultan Indonesia
Building
AIVRA, as founder and CTO
Education
Informatics, Universitas Gunadarma (GPA 3.87)
Portrait of Muhammad Saddam Fedayeen

Security operations

Phishing triage, incident mitigation and awareness programs that strengthen the human layer of defense.

Offensive security

Vulnerability assessment, penetration testing and threat intelligence to find weaknesses before attackers do.

AI & product engineering

Prompt engineering and full-stack development, from AI-assisted workflows to a production SaaS.

From the field

Short replays of work I’ve handled — a vulnerability assessment, a phishing incident, honeypot research, a device repair and an awareness simulation.

Replays are simulated; names, numbers and addresses are illustrative.

See my experience

Experience

Security operations, offensive testing and hands-on IT support across consulting, device-as-a-service and financial services.

  1. MSBU Konsultan

    Jul 2025 — Present

    Current

    IT Security & Operations

    PT. MSBU Konsultan Indonesia

    • Lead The Heist Prevention Initiative (HPI), a company-wide awareness program that strengthens the human layer of defense.
    • Triage phishing reports in the Google Workspace Admin Console — quarantining messages and blocking malicious domains.
    • Run phishing simulations over email and WhatsApp to find awareness gaps and train employees.
    • Security awareness
    • Phishing triage
    • Google Workspace
    • Simulations
  2. Renpal

    Jul 2025 — Present

    Current

    Technical Support Specialist

    Renpal (DaaS) · PT. MSBU Akses Perangkat

    • Diagnose and resolve problems on laptops, operating systems and peripherals quickly and efficiently.
    • Install, update and optimize operating systems and essential apps to keep devices at their best.
    • Write knowledge-base troubleshooting guides that speed up future resolutions.
    • Device support
    • OS deployment
    • Troubleshooting
    • Knowledge base
  3. Home Credit

    Sep 2024 — Dec 2024

    Internship

    IT Security Development Intern

    PT. Home Credit Indonesia

    • Performed vulnerability assessments to identify and evaluate weaknesses in company systems and applications.
    • Carried out penetration tests that simulated real attacks to measure how well systems hold up.
    • Analyzed threat intelligence data to predict, detect and respond to attacks proactively.
    • Vulnerability assessment
    • Penetration testing
    • Threat intelligence
  4. Celerates

    Feb 2024 — Jun 2024

    MSIB batch 6

    Cybersecurity Acceleration Program

    Celerates · PT. Mitra Talenta Grup

    • Studied network attacks in depth, including social engineering and physical attacks.
    • Learned web application architecture and attacks such as SQL injection and XSS, plus vulnerability management.
    • Covered malware fundamentals — from worms and trojans to ransomware and rootkits — and anti-malware strategy.
    • Network attacks
    • Web security
    • Malware analysis

Projects

A product I founded and lead as CTO, the research behind my thesis, and the security program I run at work.

Live product

AIVRA

Founder & CTO — designed and built end to end

An all-in-one F&B management platform for Indonesian restaurants and cafés. It connects the cashier, the kitchen and the guest in one system.

Visit aivra.id
Point of Sale
Fast, accurate cashier for orders and payments.
Kitchen Display
Real-time order board for the kitchen, no paper.
QR Menu
Guests browse and order straight from their table.
Reports & analytics
Sales trends and bestsellers as they happen.

Built with Next.js, TypeScript, Express and PostgreSQL, with role-based access, hashed credentials and rate-limited, validated APIs.

Kitchen Display
Share

Kitchen Display

All orders
New
New2

Roti Bakar

#A-2038Takeaway

Teh Tarik

#A-2037Table 9

New order

Preparing3

Mie Goreng

#A-2036Table 5

Es Kopi Aren × 3

#A-2035QR order

Croissant, Americano

#A-2034Table 12

New order

Ready2

Nasi Goreng

#A-2033Table 3

Matcha Latte

#A-2032Takeaway

New order

Served34

Kopi Susu × 2

#A-2031Table 7

Chicken Katsu

#A-2042Table 10

Cappuccino

#A-2041Table 4

Pisang Goreng

#A-2040QR order

Latte × 2

#A-2039Table 1

An illustrative walkthrough of AIVRA's kitchen display, with orders moving from the table to served.

  1. Kali Linux

    Attacker

  2. Cowrie

    Honeypot

  3. Wazuh agent

    Ships logs

  4. Wazuh

    SIEM alerts

Undergraduate thesis, Apr — Aug 2025

Deception technology (honeypot) for cyber defense

A virtual lab on VMware Workstation Pro that lures attackers into a fake SSH/Telnet service and turns every move into a real-time SIEM alert.

  • Ubuntu Server hosts Cowrie, simulating vulnerable SSH and Telnet services.
  • Agent-based monitoring centralizes logs in the Wazuh manager for detection and analysis.
  1. Train

    Awareness

  2. Simulate

    Email & WhatsApp

  3. Report

    Employees flag it

  4. Respond

    Triage & block

Security awareness program, PT. MSBU Konsultan Indonesia

The Heist Prevention Initiative

Most breaches start with a person, not a server. HPI trains employees to spot and report the attacks that actually reach them.

  • Phishing simulations over email and WhatsApp measure where awareness is weakest.
  • Real reports are triaged in Google Workspace — quarantined and blocked before they spread.

Skills

What I use across security work and product building — from testing and triage to shipping software.

Security

Finding weaknesses and stopping the attacks that reach people.

  • Vulnerability assessment
  • Penetration testing
  • Threat hunting & intelligence
  • Phishing triage & simulation
  • Security awareness programs
  • SIEM monitoring
  • Incident mitigation

Tools

What I reach for on the job.

  • Kali Linux
  • Wazuh
  • Cowrie
  • VMware
  • Google Workspace Admin
  • Cisco Packet Tracer

Building

How I design and ship products like AIVRA.

  • Prompt engineering
  • Next.js
  • TypeScript
  • Express
  • PostgreSQL
  • Python
  • Go
  • Java
  • C/C++

Working style

How I work with teams and get things done.

  • Problem solving
  • Critical thinking
  • Teamwork
  • Time management
  • Technical documentation
  • Linux server administration
  • Network design

Education

A computer science degree, hands-on lab training and certifications in networking, Linux and security.

Sep 2021 — Sep 2025

Universitas Gunadarma

Bachelor of Informatics (S1), Depok

3.87

GPA out of 4.00

Lab training at LEPKOM in database management systems, Windows and intermediate Linux administration, and programming in:

  • Java
  • Go
  • C
  • C++
  • COBOL
  • Assembly
  • Python
  • Ruby

Certifications

7 total
  • 2025

    Junior Computer Network Technician

    Teknisi Muda Jaringan Komputer, BNSP

  • 2024

    Network Design and Configuration Using Switch Device

    Universitas Gunadarma

  • 2024

    Intermediate Linux Server Administration

    Universitas Gunadarma

  • 2024

    Certified Secure Computer User v3 (CSCU)

    EC-Council

  • 2024

    Cyber Security Awareness Professional (CAPC)

  • 2024

    Fundamental Penetration Testing

  • 2024

    Fundamental Command Linux

Open to opportunities

Let's secure the future.

Hiring for a security role, or need a product built? I'm open to full-time roles, freelance work and collaborations.

Based in Jakarta, Indonesia