Jeremy Alfananda
CISO STRATEGY & AI THREAT DEFENSE
Assistant Manager, CISO at PT Bank Negara Indonesia (Persero) Tbk. Hardening enterprise risk, DevSecOps, and continuous model TEVV.
Official Works
Our carefully curated defense frameworks, AI threat models, and automated engineering controls.
AI-assisted threat modeling framework aligning CWE, OWASP, ASVS, and DREAD risk quantification.
Hardening enterprise LLMs against prompt injection jailbreaks, data exfiltration, and unauthorized tool calls.
Intelligent security filter inspecting synthesized code syntax and semantic logic prior to deployment.
Embedding automated threat detection, Trivy vulnerability audits, and admission controls into CI/CD.
Tour Dates
Assistant Manager, CISO / Security Assessment
Leading comprehensive enterprise security assessments, evaluating critical banking application vulnerabilities, aligning threat models with executive risk management.
DevSecOps Specialist
Engineered automated security monitoring workflows, implemented secure coding guardrails, and orchestrated hardened container runtimes using Docker and Kubernetes.
Technology & Security Consulting
Delivered strategic advisory on technological resilience, cybersecurity compliance, infrastructure scaling, and product security posture.
Cyber Security Intelligence Officer
Conducted application penetration testing, validated enterprise directory server policy configurations, and hardened digital banking access points.
Bachelor's Degree in Cyber Security
Rigorous foundation in cryptography, network defense, reverse engineering, and threat architecture fundamentals.
Where does Jeremy lead CISO Security Assessment and enterprise risk profiling?
Technical Expertise
Proficiencies and validated standards deployed across enterprise environments.
- Threat Modeling & Architecture
- Vulnerability Assessment
- Enterprise Risk Scoring
- Application Penetration Testing
- Security Posture Management
- CISO Strategic Alignment
- Prompt Injection Hardening
- Adversarial Red-Teaming
- AI Threat Vector Analysis
- RAG Data Boundary Controls
- Continuous Model TEVV
- AI Compliance & Governance
- DevSecOps Pipeline Design
- Kubernetes & Container Hardening
- Automated SAST & DAST Gates
- Linux & SQL System Audit
- Infrastructure as Code Security
- Identity & Access Management
- OWASP Top 10 & LLM Top 10
- CWE Vulnerability Catalog
- OWASP ASVS / MSVS
- STRIDE Threat Classification
- DREAD Risk Methodology
- NIST Cybersecurity Framework
Let's build with Us
Have an enterprise security challenge, threat modeling question, or idea worth exploring? Let's connect.