Available for work

Sachril Candra

Building secure web apps and finding vulnerabilities before attackers do — from Indonesia 🇮🇩

View Work Get In Touch

0+Projects

0+Years Exp.

0+Vulns Found

~/r1lz — bash

r1lz@sxc:~$ whoami

Web Developer | Pentester

r1lz@sxc:~$ cat skills.json

▸ PHP/Laravel, React, PostgreSQL, Docker

▸ Burp Suite Pro, Adv Web Exploitation

▸ Manual Pentesting, Python, OSINT

r1lz@sxc:~$ ./hire_me.sh

[+] Open to opportunities... █

⚡ Next.js 🐘 PHP & Laravel 🐳 Docker 🛢️ PostgreSQL 🔍 Burp Suite Pro 💉 Web App Exploits 🐉 Kali Linux 🕸️ CVE Research

// about & skills

Who Am I?

Self-driven tech enthusiast who bridges web engineering and offensive security. I believe the best developers think like attackers — so I do both.

Currently open for freelance, part-time, or full-time opportunities.

github.com/r1lz sxc.cnd@gmail.com

HTML / CSS / JS (ES6+)

90%

PHP & Laravel (API, Auth, Queue)

85%

Next.js / React

80%

Docker & CI/CD

75%

Next.jsLaravelPHPPostgreSQLMySQLDockerREST APIGitTailwindCSSLinux Server

Burp Suite (Intercept, Scanner, Repeater)

85%

Web Exploitation (SQLi, XSS, SSRF, IDOR)

80%

Recon & OSINT

75%

CVE Analysis & PoC Development

70%

Burp SuiteSQLmapffufGobusterNmapNucleiMetasploitKali LinuxOWASP Top 10CVE

// projects

Web Dev

Nextask — Task Management REST API

REST API for a Task Management System built with Laravel 13 & Sanctum. Implements clean architecture, token-based auth, full task & project CRUD, Eloquent Policies, and automated PHPUnit testing.

PHPLaravel 13REST APISanctumPHPUnitMySQL

Web Dev

Secure Vault

Enterprise-grade self-hosted private cloud storage built with Laravel 13. Implements Zero-Trust Architecture, HMAC-SHA256 signed URLs, per-user quotas, and an immutable audit trail.

PHPLaravel 13Tailwind CSSHMAC-SHA256RBAC

View All on GitHub →

// experience & certs

// PROFESSIONAL WORK

Founder & Bug Bounty Hunter @ XySyn

2022 — Present

Spearheaded a specialized freelance bug bounty team focused on uncovering critical vulnerabilities in high-value targets.
Conducted comprehensive manual penetration testing on complex web applications, prioritizing logic flaws and chained exploits.
Successfully secured numerous bounties by delivering detailed, reproducible proof-of-concept reports to international organizations.

Advanced Web Exploitation Burp Suite Pro OWASP Top 10 Manual Pentesting

Web Developer @ PT INTI (Persero) Bandung

2019 — 2022

Engineered and maintained scalable enterprise web applications, leveraging modern MVC frameworks and React for dynamic front-end interfaces.
Architected secure RESTful APIs and optimized complex PostgreSQL queries, significantly improving system latency.
Implemented robust authentication mechanisms and strict access controls to safeguard sensitive corporate data.

PHP / Laravel React PostgreSQL REST API

// ACADEMIC & ORGANIZATIONS

President @ BEM FSAINTEK Univ. Muhammadiyah Sukabumi Outstanding Leadership

Sep 2023 — Sep 2024

Directed the Student Executive Board's strategic vision, overseeing the successful execution of high-impact programs for student development.
Fostered a collaborative faculty culture by organizing large-scale academic competitions and leadership seminars.
Negotiated with university stakeholders to secure resources, ensuring the sustainability of organizational initiatives.

Strategic Leadership Stakeholder Management Public Speaking

Machine Learning Cohort @ Bangkit Academy

Aug 2023 — Dec 2023

Graduated from an intensive, industry-led apprenticeship program designed by Google, GoTo, and Traveloka.
Developed deep expertise in Data Analysis, Python, and the TensorFlow framework for building predictive models.
Collaborated in cross-functional teams to build and deploy a capstone machine learning project addressing real-world challenges.

Python TensorFlow Data Analysis

Curriculum Staff @ GDSC UMMI

2021 — 2022

Designed and structured technical curriculums for university-wide student developer programs.
Facilitated hands-on tech workshops and study jams, bridging the gap between theoretical knowledge and practical industry skills.

Curriculum Design Tech Mentorship

Bachelor's Degree in Informatics Engineering @ Univ. Muhammadiyah Sukabumi

Graduated

Acquired a strong foundation in computer science principles, software engineering methodologies, and advanced algorithms.
Demonstrated consistent academic excellence while actively balancing rigorous coursework with prominent leadership roles.

Software Engineering (RPL) @ SMK PASIM PLUS Sukabumi