Senior IT Security & Incident Response Analyst

PT Chandra Asri Pacific Tbk; Jakarta Pusat; On-site; IDR 350,000,000 - 550,000,000; Full time

Job summary

Chandra Asri Group is seeking an IT Security Senior Analyst to perform hands-on security operations across IT and OT domains in Indonesia. You will lead L2/L3 incident response, mentor analysts, and drive remediation within strict timelines.

The role requires 5+ years of security operations experience, proficiency with IAM, NGFW, endpoint security, and vulnerability management, and strong Bahasa Indonesia communication. A Bachelor’s degree is required and English is acceptable for coordination.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• Minimum 5 years of hands-on security operations experience covering at least two of: SOC/MxDR, vulnerability management, IAM (Microsoft Entra ID / AD), NGFW, endpoint security, application security/PenTest.
• Working knowledge of CSM/FIM tooling and processes.
• Familiarity with ISO 27001/27002, NIST CSF; exposure to IEC 62443 / OT-security concepts is a plus.
• Industry certifications such as CEH, CompTIA Security+, AZ-500, Fortinet NSE 4+ are preferred.
• Strong communication in Bahasa Indonesia; working-level English sufficient for documentation, ticket handling, and coordination with regional/3P teams.

Responsibilities

• Perform vulnerability testing for common issues (SQL injection, XSS); demonstrate systematic weaknesses.
• Develop and present the Application Penetration Test final report and assist remediation within agreed timelines.
• Administer endpoint security on in-scope servers and workstations (Microsoft Defender), including procedures, malware response, and policy improvements.
• Operate CSM/FIM - discovery, baseline updates, deployment, alert qualification, and compliance reporting.
• Implement standard/emergency firewall rules, signature updates, custom content filtering, and patches under change/release management.
• Coordinate with MxDR/SOC for threat monitoring, response, and IPS tuning.
• Operate Microsoft Entra-based JML, PIM, and MFA; resolve user-data, workflow, SoD, and provisioning issues.
• Run internal/external vulnerability scans, manage false positives, and provide remediation recommendations.
• Coordinate / oversee security vendors on assigned activities; drive RCA on security incidents and mentor Analysts.

Skills

Security operations

Incident response

Threat monitoring

Communication in Bahasa Indonesia

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Microsoft Defender

Microsoft Entra ID / AD

CSM/FIM tooling

Fortinet / Palo Alto NGFW

MxDR / SOC coordination

Job description

Chandra Asri Group is seeking an IT Security Senior Analyst to perform hands-on security operations across IT and OT domains in Indonesia. You will lead L2/L3 incident response, mentor analysts, and drive remediation within strict timelines.

The role requires 5+ years of security operations experience, proficiency with IAM, NGFW, endpoint security, and vulnerability management, and strong Bahasa Indonesia communication. A Bachelor’s degree is required and English is acceptable for coordination.