Security Engineer (Cloud and Application)

Ensign is hiring!

Security Engineer - Cloud & App

Location: Jakarta (onsite) | Reports to: Security Engineering Manager

Role Summary

Owns implementation and operation of the cloud and application security domain: cloud-native application protection and web application firewalling. The most explicitly cloud-first of the domain roles.

Key Responsibilities

operate CNAPP: CSPM, workload and container protection operate WAF: rule tuning, bot/DDoS mitigation, app onboarding Assess and remediate cloud misconfigurations and application-layer risk Integrate CNAPP/WAF findings into SIEM/SOAR workflows Partner with DevOps/cloud teams on secure-by-design practices Maintain cloud & app domain documentation and standards Requirements

3-5+ years in cloud security engineering (AWS/Azure/GCP) Hands-on experience with CNAPP/CSPM and WAF platforms Strong understanding of cloud-native application architectures Cloud security background required - not traditional infrastructure security Cloud security certification (CCSP, cloud provider security cert) preferred Jakarta-based; onsite