Security Engineer (Cloud and Application)

Ensign is hiring ! Security Engineer — Cloud & App Location: Jakarta (onsite) | Reports to: Security Engineering Manager Role Summary Owns implementation and operation of the cloud and application security domain: cloud-native application protection and web application firewalling. The most explicitly cloud-first of the domain roles. Key Responsibilities operate CNAPP: CSPM, workload and container protection operate WAF: rule tuning, bot/DDoS mitigation, app onboarding Assess and remediate cloud misconfigurations and application-layer risk Integrate CNAPP/WAF findings into SIEM/SOAR workflows Partner with DevOps/cloud teams on secure-by-design practices Maintain cloud & app domain documentation and standards Requirements 3-5+ years in cloud security engineering (AWS/Azure/GCP) Hands-on experience with CNAPP/CSPM and WAF platforms Strong understanding of cloud-native application architectures Cloud security background required — not traditional infrastructure security Cloud security certification (CCSP, cloud provider security cert) preferred Jakarta-based; onsite