Cloud & App Security Engineer - CNAPP & WAF (Jakarta)

Ensign InfoSecurity; Jakarta Pusat; Hybrid; IDR 400,000,000 - 700,000,000; Full time

Job summary

Ensign InfoSecurity is seeking a Security Engineer — Cloud & App to own the cloud and application security domains in Jakarta. You will operate CNAPP/CSPM for workload and container protection and manage WAF rule tuning, bot/DDoS mitigation, and app onboarding.

The role requires 3–5+ years in cloud security engineering, strong knowledge of cloud-native architectures, and hands-on CNAPP and WAF experience. Onsite, Jakarta-based, with opportunities for cloud-security certifications.

Qualifications

• 3–5+ years in cloud security engineering (AWS/Azure/GCP).
• Hands-on experience with CNAPP/CSPM and WAF platforms.
• Strong understanding of cloud-native application architectures.
• Cloud security background required, not traditional infrastructure security.
• Cloud security certification (CCSP or provider cert) preferred.

Responsibilities

• Operate CNAPP: CSPM, workload and container protection.
• Operate WAF: rule tuning, bot/DDoS mitigation, app onboarding.
• Assess and remediate cloud misconfigurations and application-layer risk.
• Integrate CNAPP/WAF findings into SIEM/SOAR workflows.
• Partner with DevOps/cloud teams on secure-by-design practices.
• Maintain cloud & app domain documentation and standards.

Skills

CNAPP/CSPM

WAF platforms

Cloud-native architecture

Cloud security

Security engineering

Tools

WAF platforms

CNAPP tools

SIEM/SOAR integration

Job description

Ensign InfoSecurity is seeking a Security Engineer — Cloud & App to own the cloud and application security domains in Jakarta. You will operate CNAPP/CSPM for workload and container protection and manage WAF rule tuning, bot/DDoS mitigation, and app onboarding.

The role requires 3–5+ years in cloud security engineering, strong knowledge of cloud-native architectures, and hands-on CNAPP and WAF experience. Onsite, Jakarta-based, with opportunities for cloud-security certifications.