IT Security Analyst (Talent Pool)

Chandra Asri; Jakarta Pusat; On-site; IDR 350,000,000 - 520,000,000; Full time

Job summary

Chandra Asri Group is seeking an IT Security Analyst (Talent Pool) to perform hands-on security operations across IT and OT domains in Indonesia. The role leads L2/L3 incident response, mentors analysts, and coordinates with 3P security vendors to ensure security deliverables.

The candidate should have 5+ years in security operations, familiarity with Entra/Defender, NGFW, and vulnerability management, with Bahasa Indonesia fluency and working-level English for documentation and coordination.

Qualifications

• Bachelor's degree required in CS/cybersecurity/info security or related field.
• Hands-on security operations experience across multiple domains.
• Familiarity with ISO 27001/27002, NIST CSF; OT-security exposure is a plus.
• Industry certifications such as CEH, CompTIA Security+, AZ-500 are preferred.

Responsibilities

• Perform hands-on security operations across IT and supporting OT domains.
• Lead L2/L3 incident response and mentor analysts.
• Implement and tune NGFW rules and content filtering; coordinate with SOC.
• Operate IAM tasks including JML, PIM, MFA and vulnerability scans.
• Support OT patch management, secure remote access, and incident RCA.

Skills

Security Operations

Incident Response

Vulnerability Management

IAM

Endpoint Security

PenTesting

Network Security

Bahasa Indonesia

English

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

Microsoft Defender

Microsoft Entra

Fortinet

Palo Alto

MxDR

Job description

Select how often (in days) to receive an alert:

IT Security Analyst (Talent Pool)

Location:

Jakarta, ID

IT Security Analyst

Chandra Asri Group, through its subsidiary PT Chandra Asri Sentral Solusi (CASS), has established a Shared Service Center (SSC) to enhance operational efficiency and support the business growth of its subsidiaries. From finance and HR to procurement, customer operations, and IT, our SSC is the backbone that keeps businesses running smoothly.

Job Purposes

The IT Security Senior Analyst is a senior individual contributor performing hands-on security operations across IT (and supporting OT) domains for CASS-served entities in Indonesia. The role executes complex changes, leads L2/L3 incident response, and mentors Analysts.

Key responsibilities

• Application Security & Penetration Testing: Perform vulnerability testing for common issues (SQL injection, XSS); demonstrate systematic weaknesses (credential mining, brute-force, buffer overflow, format-string, session hijacking). Develop and present the Application Penetration Test final report and assist remediation within agreed timelines.
• Endpoint Security & CSM/FIM: Administer endpoint security on in-scope servers and workstations (Microsoft Defender), including procedures, malware response, and policy improvements. Operate CSM/FIM — discovery, baseline updates, deployment, alert qualification, and compliance reporting.
• NGFW Security Ops & MxDR: Implement standard/emergency firewall rules, signature updates, custom content filtering, and patches under change/release management. Coordinate with MxDR/SOC for threat monitoring, response, and IPS tuning.
• IAM & Infrastructure Vulnerability Management: Operate Microsoft Entra-based JML, PIM, and MFA (Microsoft Authenticator); resolve user-data, workflow, SoD, and provisioning issues. Run internal/external vulnerability scans, manage false positives, and provide remediation recommendations.
• OT Security Support: Support OT Patch Management, AV, secure remote access, and portable-media handling in coordination with OT Site Focals.
• Coordination & Improvement: Coordinate / oversee Kyndryl and other 3P security vendors on assigned activities; validate deliverables. Drive RCA on security incidents and mentor Analysts.

Job Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• Minimum 5 years of hands-on security operations experience covering at least two of: SOC/MxDR, vulnerability management, IAM (Microsoft Entra ID / AD), NGFW (Fortinet, Palo Alto, or similar), endpoint security (Microsoft Defender), application security/PenTest.
• Working knowledge of CSM/FIM tooling and processes.
• Familiarity with ISO 27001/27002, NIST CSF; exposure to IEC 62443 / OT-security concepts is a plus.
• Industry certifications such as CEH, CompTIA Security+, AZ-500, Fortinet NSE 4+ are preferred.
• Strong communication in Bahasa Indonesia; working-level English sufficient for documentation, ticket handling, and coordination with regional/3P teams.

If you’re ready to bring your skills to a dynamic environment where your work makes an impact across industries and borders, we’d love to hear from you. Join us atChandra Asri Groupand be part of shaping a smarter, more connected future. Apply today!

Chandra Asri is only releasing official job posting at Chandra Asri Career Site (careers.capcx.com), Linkedin & Jobstreet. The Company will contact shortlisted candidate via official corporate email & phone, and will not send any hardcopy invitation for interview. Please note that the Company doesn’t ask candidates to transfer some amount of money nor cooperate with any travel agent.