Security Engineer (Cloud and Application)

Ensign InfoSecurity; Jakarta Pusat; Hybrid; IDR 400,000,000 - 700,000,000; Full time

Job summary

Ensign InfoSecurity is seeking a Security Engineer — Cloud & App to own the cloud and application security domains in Jakarta. You will operate CNAPP/CSPM for workload and container protection and manage WAF rule tuning, bot/DDoS mitigation, and app onboarding.

The role requires 3–5+ years in cloud security engineering, strong knowledge of cloud-native architectures, and hands-on CNAPP and WAF experience. Onsite, Jakarta-based, with opportunities for cloud-security certifications.

Qualifications

• 3–5+ years in cloud security engineering (AWS/Azure/GCP).
• Hands-on experience with CNAPP/CSPM and WAF platforms.
• Strong understanding of cloud-native application architectures.
• Cloud security background required, not traditional infrastructure security.
• Cloud security certification (CCSP or provider cert) preferred.

Responsibilities

• Operate CNAPP: CSPM, workload and container protection.
• Operate WAF: rule tuning, bot/DDoS mitigation, app onboarding.
• Assess and remediate cloud misconfigurations and application-layer risk.
• Integrate CNAPP/WAF findings into SIEM/SOAR workflows.
• Partner with DevOps/cloud teams on secure-by-design practices.
• Maintain cloud & app domain documentation and standards.

Skills

CNAPP/CSPM

WAF platforms

Cloud-native architecture

Cloud security

Security engineering

Tools

WAF platforms

CNAPP tools

SIEM/SOAR integration

Job description

**Security Engineer — Cloud & App**Location: Jakarta (onsite) | Reports to: Security Engineering Manager **Role Summary**Owns implementation and operation of the cloud and application security domain: cloud-native application protection and web application firewalling. The most explicitly cloud-first of the domain roles. **Key Responsibilities*** operate CNAPP: CSPM, workload and container protection* operate WAF: rule tuning, bot/DDoS mitigation, app onboarding* Assess and remediate cloud misconfigurations and application-layer risk* Integrate CNAPP/WAF findings into SIEM/SOAR workflows* Partner with DevOps/cloud teams on secure-by-design practices* Maintain cloud & app domain documentation and standards**Requirements*** 3-5+ years in cloud security engineering (AWS/Azure/GCP)* Hands-on experience with CNAPP/CSPM and WAF platforms* Strong understanding of cloud-native application architectures* Cloud security background required — not traditional infrastructure security* Cloud security certification (CCSP, cloud provider security cert) preferred* Jakarta-based; onsite