Skip to content
View HaikalE's full-sized avatar

Highlights

  • Pro

Block or report HaikalE

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
HaikalE/README.md

Muhammad Haikal Rahman

Master’s student in Informatics at Institut Teknologi Bandung and Computer Science graduate focused on cybersecurity, security engineering, defensive security, and open-source software.

I previously worked as a Data Engineer Intern at Telkomsel. My current work combines security monitoring, applied cryptography, software engineering, and upstream open-source contributions.

Open-source security work

Recent upstream pull requests:

  • OpenSSF Allstar — #873: add an explicit diagnostic when GitHub App authentication succeeds but no installations are found, document the installation step, and add regression coverage.
  • Yelp detect-secrets — #992: reduce false positives in the Go keyword detector by requiring quoted assignment values and adding regression tests.
  • Sigstore Python — #1875: extend conformance CI to exercise the staging environment.

The status and review history for each contribution are available on the linked upstream pull request.

Security projects

Windows endpoint telemetry and SIEM lab using Sysmon, PowerShell logging, Windows Security events, Splunk, SPL detections, MITRE ATT&CK mapping, false-positive tuning, and evidence-driven incident reports.

Android and Node.js undergraduate research prototype exploring AES-GCM message encryption and RSA CRT key operations. It is documented as an academic cryptography prototype rather than a production-secure messenger.

Educational Python implementation of the Schmidt–Samoa public-key cryptosystem, including key generation, modular arithmetic, probable-prime generation, regression exercises, and explicit production-security limitations.

Selected engineering work

Python ETL pipeline using Apache Airflow, Amazon S3, PostgreSQL, and Plotly Dash to collect, transform, store, and analyze YouTube trending-video data.

React application that runs Stockfish analysis in the browser, imports PGN and online games, and synchronizes move navigation, engine evaluation, and charts without blocking the UI.

Security focus

  • endpoint telemetry and Windows event investigation
  • SIEM detection engineering and SPL
  • incident triage and cross-source correlation
  • MITRE ATT&CK mapping
  • software supply-chain and open-source security tooling
  • applied cryptography and secure-software research
  • Python automation and data analysis

Research and recognition

  • IEEE ICERA 2025 co-author: Instant Messaging Security Using Affine Cipher and RSA CRT Algorithm
  • Two registered Indonesian software copyrights related to RSA-based image-security applications
  • Top 33 Programmer Talent ("Hacker" Track), IndonesiaNEXT 9 — Telkomsel, 2025

Credentials

  • ISC2 Certified in Cybersecurity (CC)
  • Information Technology Specialist in Python — Certiport

Technology

Splunk · Sysmon · PowerShell · MITRE ATT&CK · Python · Go · JavaScript · SQL · Kotlin · Node.js · React · PostgreSQL · Apache Airflow · AWS S3 · Docker · Git · GitHub Actions

Contact

Portfolio · LinkedIn

Pinned Loading

  1. soc-home-lab soc-home-lab Public

    SOC home lab for Windows telemetry, Splunk detections, incident investigation, and MITRE ATT&CK mapping.

  2. RSA-AES-CHAT-APPLICATION-ANDROID RSA-AES-CHAT-APPLICATION-ANDROID Public

    Android thesis prototype exploring AES-GCM messaging and RSA-CRT key operations.

    Kotlin

  3. schmidt-samoa-cryptosystem schmidt-samoa-cryptosystem Public

    Implementasi Schmidt-Samoa Cryptosystem dalam Python - sistem kriptografi kunci publik yang keamanannya bergantung pada kesulitan pemfaktoran bilangan

    Python

  4. youtube-data-engineering youtube-data-engineering Public

    Airflow ETL pipeline for YouTube trending data using S3, PostgreSQL, and Plotly Dash.

    Python

  5. React-Chess-Analyze React-Chess-Analyze Public

    Browser-based chess analyzer using React, Stockfish, Web Workers, PGN import, and interactive evaluation charts.

    JavaScript