IT Security Analyst

Chandra Asri Group, through its subsidiary PT Chandra Asri Sentral Solusi (CASS), has established a Shared Service Center (SSC) to enhance operational efficiency and support the business growth of its subsidiaries. From finance and HR to procurement, customer operations, and IT, our SSC is the backbone that keeps businesses running smoothly.

Job Purposes

The IT Security Senior Analyst is a senior individual contributor performing hands-on security operations across IT (and supporting OT) domains for CASS-served entities in Indonesia. The role executes complex changes, leads L2/L3 incident response, and mentors Analysts.

Key Responsibilities Include

Application Security & Penetration Testing:

Perform vulnerability testing for common issues (SQL injection, XSS); demonstrate systematic weaknesses (credential mining, brute-force, buffer overflow, format-string, session hijacking).
Develop and present the Application Penetration Test final report and assist remediation within agreed timelines.

Endpoint Security & CSM/FIM

Administer endpoint security on in-scope servers and workstations (Microsoft Defender), including procedures, malware response, and policy improvements.
Operate CSM/FIM — discovery, baseline updates, deployment, alert qualification, and compliance reporting.

NGFW Security Ops & MxDR

Implement standard/emergency firewall rules, signature updates, custom content filtering, and patches under change/release management.
Coordinate with MxDR/SOC for threat monitoring, response, and IPS tuning.

IAM & Infrastructure Vulnerability Management

Operate Microsoft Entra-based JML, PIM, and MFA (Microsoft Authenticator); resolve user-data, workflow, SoD, and provisioning issues.
Run internal/external vulnerability scans, manage false positives, and provide remediation recommendations.

OT Security Support

Support OT Patch Management, AV, secure remote access, and portable-media handling in coordination with OT Site Focals.

Coordination & Improvement

Coordinate / oversee Kyndryl and other 3P security vendors on assigned activities; validate deliverables.
Drive RCA on security incidents and mentor Analysts.

Job Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
Minimum 5 years of hands-on security operations experience covering at least two of: SOC/MxDR, vulnerability management, IAM (Microsoft Entra ID / AD), NGFW (Fortinet, Palo Alto, or similar), endpoint security (Microsoft Defender), application security/PenTest.
Working knowledge of CSM/FIM tooling and processes.
Familiarity with ISO 27001/27002, NIST CSF; exposure to IEC 62443 / OT-security concepts is a plus.
Industry certifications such as CEH, CompTIA Security+, AZ-500, Fortinet NSE 4+ are preferred.
Strong communication in Bahasa Indonesia; working-level English sufficient for documentation, ticket handling, and coordination with regional/3P teams.

If you’re ready to bring your skills to a dynamic environment where your work makes an impact across industries and borders, we’d love to hear from you. Join us at Chandra Asri Group and be part of shaping a smarter, more connected future. Apply today!

Important Notes

Chandra Asri is only releasing official job posting at Chandra Asri Career Site (careers.capcx.com), Linkedin & Jobstreet. The Company will contact shortlisted candidate via official corporate email & phone, and will not send any hardcopy invitation for interview. Please note that the Company doesn’t ask candidates to transfer some amount of money nor cooperate with any travel agent.

BEWARE OF RECRUITMENT SCAM.

IT Security Analyst (Talent Pool)