Rifqi Rofian Tanamas
Cybersecurity Professional
Summary
Cybersecurity professional with 3+ years of progressive experience in SOC operations, incident response, and security automation. Proven in leading cross-functional teams, developing Splunk use cases, optimizing threat detection, and ensuring SLA adherence in enterprise security environments. Experienced in delivering IT security projects across government and financial sectors, including AV deployment, SIEM integration, and threat monitoring. Strong foundation in CSIRT principles, audit response, and aligning technical outcomes with business requirements.
Experience
Lead Technical (Cybersecurity)
Focus Solusi Infotama – Jakarta, Indonesia | Jul 2024 – Present
- Led a 7-person L1 SOC team, providing operational direction, mentoring, and conflict resolution.
- Developed Python-based automation tools, reducing analyst error and increasing blocking accuracy by 70%.
- Created and refined Spl dashboards, reducing false positives by 90% and improving response time.
- Handled complex incidents as L2 Analyst and provided escalation support.
- Led Bitdefender AV deployment across 2,850 endpoints with a 4-person team.
- Acted as a bridge between client and vendor, aligning technical deliverables and project goals.
- Tools: Splunk, CrowdStrike, ExtraHop, Ixia ThreatArmor, Bitdefender, Python, Jira, Excel.
IT Security Engineer
PT. CIMB Niaga Finance – Jakarta, Indonesia | Apr 2024 – Present
- Operated antivirus platforms (PandaSecurity, SentinelOne, Kaspersky).
- Provided VPN support, password resets, and privileged access reviews (CyberArk).
- Supported daily AD operations and GPO checks.
- Tools: CyberArk, VPN, Active Directory.
Cybersecurity Engineer
PT Alpha Citra Siber Indonesia – Jakarta, Indonesia | Jun 2023 – Apr 2024
- Monitored and triaged ~20 incidents weekly across 3 client environments via SIEM (Splunk, QRadar, Wazuh).
- Enhanced detection logic, improving alert accuracy and reducing escalations.
- Collaborated with admins and vendors for threat mitigation.
- Contributed to Splunk documentation and knowledge base.
- Tools: Wazuh, Splunk, QRadar, Jira, SentinelOne.
IT Support Technician
Universitas Multimedia Nusantara – Tangerang, Indonesia | Jul 2019 – Jun 2023
- Provided desktop support, system maintenance, and virus protection updates.
- Diagnosed hardware/software issues and managed user accounts securely.
Selected Projects
- Antivirus Deployment – BPS (2024): Project Leader for Bitdefender deployment across 2,850 endpoints at Badan Pusat Statistik. Managed team, ensured SLA compliance, minimized disruption, and delivered hands-on training.
- SOC Automation & Dashboarding – DJBC (2024): Technical advisor and implementer for Python-based automation scripts and Splunk dashboards at DJBC. Developed use cases and optimized false positive handling by 90%.
- Multi-Client SIEM Operations – ACSI (2023–2024): SOC L1 Analyst for real-time monitoring and triage of 20+ weekly incidents across 3 managed clients. Documented alert standards to support CSIRT operations.
Education
-
Nusa Mandiri University, Jakarta
Bachelor's Degree – Information Systems, GPA: 3.67 (2021–2023) -
Bina Sarana Informatika University, Jakarta
Associate Degree – Information Systems, GPA: 3.72 (2018–2021)
Certifications
- CompTIA CySA+ (Cybersecurity Analyst)
- ISO/IEC 27001 Information Security Associate™ – SkillFront
- Cybersecurity Engineer – Digitalent
- Fundamental Web Security – BelajarSiber
- CyberArk Level 1 Trustee
- IBM Cybersecurity Fundamentals
- Google IT Support Fundamentals
Skills
Technical
- SIEM: Splunk, QRadar, Wazuh
- Endpoint Security: SentinelOne, PandaSecurity, Kaspersky, Bitdefender, CrowdStrike, TrendMicro
- Scripting: Python, Bash (basic)
- Platforms: Windows Server/PC, Linux, iOS
- Identity & Access: Active Directory, CyberArk
- Networking: VPN, IDS/IPS, Incident Response
- Tools: Jira, Excel, Git
Soft Skills
- Technical Leadership & Mentoring
- Cross-functional Communication
- Incident Response Coordination
- Project Management
- Knowledge Transfer & Training