IT Security Analyst (Talent Pool)

IT Security Analyst

Chandra Asri Group, through its subsidiary PT Chandra Asri Sentral Solusi (CASS), has established a Shared Service Center (SSC) to enhance operational efficiency and support the business growth of its subsidiaries. From finance and HR to procurement, customer operations, and IT, our SSC is the backbone that keeps businesses running smoothly.

Job Purposes

The IT Security Senior Analyst is a senior individual contributor performing hands-on security operations across IT (and supporting OT) domains for CASS-served entities in Indonesia. The role executes complex changes, leads L2/L3 incident response, and mentors Analysts.

Key responsibilities include:

Application Security & Penetration Testing:
• Perform vulnerability testing for common issues (SQL injection, XSS); demonstrate systematic weaknesses (credential mining, brute-force, buffer overflow, format-string, session hijacking).
• Develop and present the Application Penetration Test final report and assist remediation within agreed timelines.

Endpoint Security & CSM/FIM:
• Administer endpoint security on in-scope servers and workstations (Microsoft Defender), including procedures, malware response, and policy improvements.
• Operate CSM/FIM — discovery, baseline updates, deployment, alert qualification, and compliance reporting.

NGFW Security Ops & MxDR:
• Implement standard/emergency firewall rules, signature updates, custom content filtering, and patches under change/release management.
• Coordinate with MxDR/SOC for threat monitoring, response, and IPS tuning.

IAM & Infrastructure Vulnerability Management:
• Operate Microsoft Entra-based JML, PIM, and MFA (Microsoft Authenticator); resolve user-data, workflow, SoD, and provisioning issues.
• Run internal/external vulnerability scans, manage false positives, and provide remediation recommendations.

OT Security Support:
• Support OT Patch Management, AV, secure remote access, and portable-media handling in coordination with OT Site Focals.

Coordination & Improvement:
• Coordinate / oversee Kyndryl and other 3P security vendors on assigned activities; validate deliverables.
• Drive RCA on security incidents and mentor Analysts.

Job Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field.
• Minimum 5 years of hands-on security operations experience covering at least two of: SOC/MxDR, vulnerability management, IAM (Microsoft Entra ID / AD), NGFW (Fortinet, Palo Alto, or similar), endpoint security (Microsoft Defender), application security/PenTest.
• Working knowledge of CSM/FIM tooling and processes.
• Familiarity with ISO 27001/27002, NIST CSF; exposure to IEC 62443 / OT-security concepts is a plus.
• Industry certifications such as CEH, CompTIA Security+, AZ-500, Fortinet NSE 4+ are preferred.
• Strong communication in Bahasa Indonesia; working-level English sufficient for documentation, ticket handling, and coordination with regional/3P teams.