Cloud & App Security Engineer — CNAPP & WAF

Ensign InfoSecurity; Indonesia; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

Ensign InfoSecurity, a leading Asia-focused cybersecurity provider, seeks a Security Engineer for Cloud & App based in Jakarta on-site. Own the cloud and application security domain with emphasis on cloud-native protections and web application firewalling.

You will operate CNAPP and WAF, tune rules, remediate misconfigurations, and integrate findings into SIEM/SOAR while collaborating with DevOps on secure-by-design practices. 3–5+ years in cloud security required.

Qualifications

• 3-5+ years in cloud security engineering (AWS/Azure/GCP).
• Hands-on experience with CNAPP/CSPM and WAF platforms.
• Strong understanding of cloud-native application architectures.
• Cloud security background required - not traditional infrastructure security.

Responsibilities

• Operate CNAPP: CSPM, workload and container protection.
• Operate WAF: rule tuning, bot/DDoS mitigation, app onboarding.
• Assess and remediate cloud misconfigurations and application-layer risk.
• Integrate CNAPP/WAF findings into SIEM/SOAR workflows.
• Partner with DevOps/cloud teams on secure-by-design practices.
• Maintain cloud & app domain documentation and standards.

Skills

CNAPP/CSPM

WAF platforms

Cloud security

Multi-cloud

CCSP cert

Tools

SIEM/SOAR

CNAPP tools

Job description

Ensign InfoSecurity, a leading Asia-focused cybersecurity provider, seeks a Security Engineer for Cloud & App based in Jakarta on-site. Own the cloud and application security domain with emphasis on cloud-native protections and web application firewalling.

You will operate CNAPP and WAF, tune rules, remediate misconfigurations, and integrate findings into SIEM/SOAR while collaborating with DevOps on secure-by-design practices. 3–5+ years in cloud security required.