Agus Nabil Santoso
SEngineering Manager at Westpac | ex-Bank Central Asia
- Westpac
- Jakarta, Indonesia · WIB (UTC+7)
- 14+ years experience
- Ateneo de Manila University
- English, Bahasa Indonesia
Messaging unavailable
Overview
14 years in software engineering, the last 1 at Westpac, where I lead the product security team. Wrote the Burp Suite service that now handles 15 million requests a day. Before that: Bank Central Asia and KPMG. Most at home with SAST and cloud security.
Good reasons to reach out
- Working sessions on threat modeling
- Questions about application security
- Speaking or podcast invitations
Please don't message about
- Offshore staffing offers
- Requests to fix your code for free
Answers in batches on Fridays
Skills
SASTAppSecIAMBurp SuiteOWASPcloud securitythreat modeling
Experience
- Engineering ManagerJul 2025 - PresentWestpac · 1 yr 3 mo · Full-time · Jakarta, Indonesia
- Built the experimentation framework 21 product teams use to ship changes safely.
- Wrote the threat modeling service that now handles 38 million requests a day.
- Shipped 24 launches on the product security team without a rollback.
- Security EngineerNov 2022 - Jul 2025Bank Central Asia · 2 yr 8 mo · Full-time · Jakarta, Indonesia
- Cut p99 latency on the product security services from 830ms to 126ms.
- Security EngineerJan 2019 - Nov 2022KPMG · 3 yr 10 mo · Full-time · Jakarta, Indonesia
- Shipped a rewrite that took build times from 33 minutes to under 4.
- Security EngineerAug 2015 - Jan 2019Sony · 3 yr 5 mo · Full-time · Jakarta, Indonesia
- Cut p99 latency on the product security services from 376ms to 125ms.
- Security EngineerOct 2012 - Aug 2015Recruit Holdings · 2 yr 10 mo · Full-time · Jakarta, Indonesia
- Shipped 28 launches on the product security team without a rollback.
Projects
Open-source OWASP toolkit
2026A small library for application security that 775 developers star on GitHub.
References
No references yet.
Education
- Ateneo de Manila UniversityBS, Computer Science2007 - 2011
Details
Compensation expectations
What they are targeting for their next role.
Visible to connections
Direct contact details
Direct email and a scheduling link.
Visible to connections