IT Security Analyst (Talent Pool)

PT Chandra Asri Pacific Tbk; Jakarta Pusat; On-site; IDR 350,000,000 - 550,000,000; Full time

Job summary

Chandra Asri Group is seeking an IT Security Senior Analyst to perform hands-on security operations across IT and OT domains in Indonesia. You will lead L2/L3 incident response, mentor analysts, and drive remediation within strict timelines.

The role requires 5+ years of security operations experience, proficiency with IAM, NGFW, endpoint security, and vulnerability management, and strong Bahasa Indonesia communication. A Bachelor’s degree is required and English is acceptable for coordination.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• Minimum 5 years of hands-on security operations experience covering at least two of: SOC/MxDR, vulnerability management, IAM (Microsoft Entra ID / AD), NGFW, endpoint security, application security/PenTest.
• Working knowledge of CSM/FIM tooling and processes.
• Familiarity with ISO 27001/27002, NIST CSF; exposure to IEC 62443 / OT-security concepts is a plus.
• Industry certifications such as CEH, CompTIA Security+, AZ-500, Fortinet NSE 4+ are preferred.
• Strong communication in Bahasa Indonesia; working-level English sufficient for documentation, ticket handling, and coordination with regional/3P teams.

Responsibilities

• Perform vulnerability testing for common issues (SQL injection, XSS); demonstrate systematic weaknesses.
• Develop and present the Application Penetration Test final report and assist remediation within agreed timelines.
• Administer endpoint security on in-scope servers and workstations (Microsoft Defender), including procedures, malware response, and policy improvements.
• Operate CSM/FIM - discovery, baseline updates, deployment, alert qualification, and compliance reporting.
• Implement standard/emergency firewall rules, signature updates, custom content filtering, and patches under change/release management.
• Coordinate with MxDR/SOC for threat monitoring, response, and IPS tuning.
• Operate Microsoft Entra-based JML, PIM, and MFA; resolve user-data, workflow, SoD, and provisioning issues.
• Run internal/external vulnerability scans, manage false positives, and provide remediation recommendations.
• Coordinate / oversee security vendors on assigned activities; drive RCA on security incidents and mentor Analysts.

Skills

Security operations

Incident response

Threat monitoring

Communication in Bahasa Indonesia

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Microsoft Defender

Microsoft Entra ID / AD

CSM/FIM tooling

Fortinet / Palo Alto NGFW

MxDR / SOC coordination

Job description

Chandra Asri Group, through its subsidiary PT Chandra Asri Sentral Solusi (CASS), has established a Shared Service Center (SSC) to enhance operational efficiency and support the business growth of its subsidiaries. From finance and HR to procurement, customer operations, and IT, our SSC is the backbone that keeps businesses running smoothly.

Job Purposes

The IT Security Senior Analyst is a senior individual contributor performing hands-on security operations across IT (and supporting OT) domains for CASS-served entities in Indonesia. The role executes complex changes, leads L2/L3 incident response, and mentors Analysts.

Key Responsibilities Include

Application Security & Penetration Testing:

• Perform vulnerability testing for common issues (SQL injection, XSS); demonstrate systematic weaknesses (credential mining, brute-force, buffer overflow, format-string, session hijacking).
• Develop and present the Application Penetration Test final report and assist remediation within agreed timelines.

Endpoint Security & CSM/FIM

• Administer endpoint security on in-scope servers and workstations (Microsoft Defender), including procedures, malware response, and policy improvements.
• Operate CSM/FIM - discovery, baseline updates, deployment, alert qualification, and compliance reporting.

NGFW Security Ops & MxDR

• Implement standard/emergency firewall rules, signature updates, custom content filtering, and patches under change/release management.
• Coordinate with MxDR/SOC for threat monitoring, response, and IPS tuning.

IAM & Infrastructure Vulnerability Management

• Operate Microsoft Entra-based JML, PIM, and MFA (Microsoft Authenticator); resolve user-data, workflow, SoD, and provisioning issues.
• Run internal/external vulnerability scans, manage false positives, and provide remediation recommendations.

OT Security Support

• Support OT Patch Management, AV, secure remote access, and portable-media handling in coordination with OT Site Focals.

Coordination & Improvement

• Coordinate / oversee Kyndryl and other 3P security vendors on assigned activities; validate deliverables.
• Drive RCA on security incidents and mentor Analysts.

Job Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• Minimum 5 years of hands-on security operations experience covering at least two of: SOC/MxDR, vulnerability management, IAM (Microsoft Entra ID / AD), NGFW (Fortinet, Palo Alto, or similar), endpoint security (Microsoft Defender), application security/PenTest.
• Working knowledge of CSM/FIM tooling and processes.
• Familiarity with ISO 27001/27002, NIST CSF; exposure to IEC 62443 / OT-security concepts is a plus.
• Industry certifications such as CEH, CompTIA Security+, AZ-500, Fortinet NSE 4+ are preferred.
• Strong communication in Bahasa Indonesia; working-level English sufficient for documentation, ticket handling, and coordination with regional/3P teams.

If you’re ready to bring your skills to a dynamic environment where your work makes an impact across industries and borders, we’d love to hear from you. Join us at Chandra Asri Group and be part of shaping a smarter, more connected future.

Chandra Asri is only releasing official job posting at Chandra Asri Career Site (careers.capcx.com), Linkedin & Jobstreet. The Company will contact shortlisted candidate via official corporate email & phone, and will not send any hardcopy invitation for interview. Please note that the Company doesn’t ask candidates to transfer some amount of money nor cooperate with any travel agent.