Senior Security Engineer

Cision

Sofia, Bulgaria2w ago

Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.

Key details

Location
Sofia, Bulgaria
Work style
Remote
Level
Senior
Job type
Full-time
Function
Software engineering
Focus area
Security
Posted
2w ago

Skills

active directoryauditauthenticationawsbashcloud securitycloud storagegcpgithubgitlabincident responsekuberneteslinuxlog analysismicrosoft windowspowershellpythonscriptingsecurity monitoringsiemsocial media managementsplunksystem administrationvpc

About the role

 

 

 

At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thrive in an environment that champions curiosity, collaboration, and innovation, all while making meaningful contributions to the brands we accelerate. 
 
Join us in shaping the future of communication and building authentic connections that matter. Whether you're solving complex problems or driving bold innovations, your growth is our success, and together, we’ll create the conversations of tomorrow. 
 
Empower your impact at Cision. Be seen, be understood, be you. 

We are seeking a Senior Security Engineer to help monitor, investigate, and respond to security activity across cloud, identity, endpoint, and Linux-based environments. This role requires hands-on technical ability, strong scripting skills, and practical experience working with AWS, with GCP experience preferred. 

What You'll Do 
  • Monitor and investigate security alerts across cloud, identity, endpoint, and network environments. 
  • Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools. 
  • Support incident response by gathering evidence, validating suspicious activity, and documenting findings. 
  • Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment.  
  • Assist with security reviews, including IAM, storage exposure, compute workloads, and network configurations. 
  • Investigate authentication activity, user behavior, privilege changes, and potential account compromise.  
  • Work with internal teams to understand systems, identify risks, and support remediation, compliance and audit activities.
  • Be available for after-hours incident response when urgent security events require investigation or support. 
What You'll Bring 
  • Experience with cloud security concepts, services, logs, and IAM. 
  • Strong scripting ability, preferably with Python, Bash, or PowerShell.  
  • Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
  • Working knowledge of Linux and Windows systems, command line usage, permissions, processes, and logs.  
  • Basic to intermediate understanding of Active Directory, including users, groups, authentication, and privilege changes.  
  • Ability to read and interpret logs from cloud platforms, operating systems, and security tools.  
  • Understanding of common security concepts such as phishing, credential compromise, privilege escalation, lateral movement, and exposed services. 
  • Strong analytical, documentation, and communication skills.  

Preferred Skills

  • Experience with Google Cloud Platform security, including IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, and service accounts. 
  • Exposure to Kubernetes, containers, or cloud-native workloads.  
  • Experience creating automation for security monitoring or response.
  • Experience with Github/Gitlab  

Minimum Qualifications

  • 3-5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role. 
  • Hands-on experience using scripts to solve operational or security problems. 
  • Comfortable working in both cloud and Linux command-line environments. 

Please note: 

  • Candidates must be available for after-hours incident response when urgent security events require investigation or support.
  • The interview process will include a hands-on practical exercise conducted through screen sharing, where candidates will be asked to demonstrate relevant technical skills. 

 

As a global leader in PR, marketing and social media management technology and intelligence, Cision helps brands and organizations to identify, connect and engage with customers and stakeholders to drive business results. PR Newswire, a network of over 1.1 billion influencers, in-depth monitoring, analytics and its Brandwatch and Falcon.io social media platforms headline a premier suite of solutions. Cision has offices in 24 countries throughout the Americas, EMEA and APAC. For more information about Cision's award-winning solutions, including its next-gen Cision Communications Cloud®, visit www.cision.com and follow @Cision on Twitter.
 
Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the CEO Action for Diversity & Inclusion™ pledge and named a “Top Diversity Employer” for 2021 by DiversityJobs.com.
 
Cision is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or

Get jobs like this as soon as they're posted

ApplyHour checks company career sites all day and ranks every opening against your profile. Free to join.

Create a free account