Security Engineer (Cloud and Application)

Ensign InfoSecurity; Indonesia; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

Ensign InfoSecurity, a leading Asia-focused cybersecurity provider, seeks a Security Engineer for Cloud & App based in Jakarta on-site. Own the cloud and application security domain with emphasis on cloud-native protections and web application firewalling.

You will operate CNAPP and WAF, tune rules, remediate misconfigurations, and integrate findings into SIEM/SOAR while collaborating with DevOps on secure-by-design practices. 3–5+ years in cloud security required.

Qualifications

• 3-5+ years in cloud security engineering (AWS/Azure/GCP).
• Hands-on experience with CNAPP/CSPM and WAF platforms.
• Strong understanding of cloud-native application architectures.
• Cloud security background required - not traditional infrastructure security.

Responsibilities

• Operate CNAPP: CSPM, workload and container protection.
• Operate WAF: rule tuning, bot/DDoS mitigation, app onboarding.
• Assess and remediate cloud misconfigurations and application-layer risk.
• Integrate CNAPP/WAF findings into SIEM/SOAR workflows.
• Partner with DevOps/cloud teams on secure-by-design practices.
• Maintain cloud & app domain documentation and standards.

Skills

CNAPP/CSPM

WAF platforms

Cloud security

Multi-cloud

CCSP cert

Tools

SIEM/SOAR

CNAPP tools

Job description

Ensign is hiring! Security Engineer - Cloud & App

Location: Jakarta (onsite) | Reports to: Security Engineering Manager

Role Summary

Owns implementation and operation of the cloud and application security domain: cloud-native application protection and web application firewalling. The most explicitly cloud-first of the domain roles.

Key Responsibilities

• Operate CNAPP: CSPM, workload and container protection
• Operate WAF: rule tuning, bot/DDoS mitigation, app onboarding
• Assess and remediate cloud misconfigurations and application-layer risk
• Integrate CNAPP/WAF findings into SIEM/SOAR workflows
• Partner with DevOps/cloud teams on secure-by-design practices
• Maintain cloud & app domain documentation and standards

Requirements

• 3-5+ years in cloud security engineering (AWS/Azure/GCP)
• Hands-on experience with CNAPP/CSPM and WAF platforms
• Strong understanding of cloud-native application architectures
• Cloud security background required - not traditional infrastructure security
• Cloud security certification (CCSP, cloud provider security cert) preferred
• Jakarta-based; onsite

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore. We specialise in the provision of these services; cybersecurity advisory and assurance, implementation and management of advanced cybersecurity controls, cybersecurity monitoring, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity.

What Makes Ensign Special?

We are a technology company with warmth and soul. We are ambitious, propelled by our vision to be the cyber defender of choice, and fueled by the dedication and camaraderie of individuals who are eager to make a difference, and leave their footprints in the industry. If you are a self-motivated curious go-getter, we want You!