[All remote jobs](https://jobicy.com/jobs.md)Open role[![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg)](https://jobicy.com/company/cision.md)Remote opportunity at[Cision](https://jobicy.com/company/cision.md) # Security Engineer I, Information Technology Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/cision.md)Share27 Aug 2026Published44Listing views3Application actions26 Sep 2026Apply before Opportunity details ## About this role. AI SummaryCision is seeking a Security Engineer to strengthen cloud, on-premises, and third-party security architecture across the organization. The role combines security engineering, DevSecOps, identity and access management, cryptography, threat management, and GRC control alignment. The engineer will partner closely with R&D and other departments, embed security in CI/CD processes, assess incidents and vulnerabilities, and help protect customer data. Although titled Engineer I, the requirement for 5+ years of relevant experience and broad technical ownership indicates an experienced individual contributor role. The position is remote within Hungary and includes availability for urgent after-hours incident response. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 4/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a broad, technically demanding security role requiring hands-on expertise across cloud security, DevSecOps, IAM, cryptography, incident response, and compliance frameworks. The engineer must independently assess risk while communicating technical controls and priorities across R&D, compliance, and operational stakeholders. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$130,000US market range$110k–$155k0$171k AI insightNo actual salary, pay range, or other candidate compensation is disclosed in the posting. The figures are estimated annual USD compensation for the US market for an experienced security engineering professional with approximately 5+ years of experience and responsibilities spanning cloud security, DevSecOps, GRC, and incident response; actual Hungary-based compensation may differ materially. ## Core skills Skills and capabilities most closely associated with this opportunity. [Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[DevSecOps](https://jobicy.com/jobs?search_keywords=DevSecOps.md)[Security Architecture](https://jobicy.com/jobs?search_keywords=Security%20Architecture.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Azure](https://jobicy.com/jobs?search_keywords=Azure.md)[GCP](https://jobicy.com/jobs?search_keywords=GCP.md)[Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[Cryptography](https://jobicy.com/jobs?search_keywords=Cryptography.md)[GRC](https://jobicy.com/jobs?search_keywords=GRC.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md) Sample interview questionsHow would you embed security effectively into an existing CI/CD pipeline?I would first map the current delivery workflow and identify high-risk points, then introduce automated controls such as SAST, dependency and secret scanning, IaC scanning, container scanning, and policy gates. Findings should be risk-prioritized, integrated into developers’ existing tools, and supported by clear remediation guidance so security improves delivery rather than becoming a late-stage blocker. Describe your approach to securing a cloud-native application that handles customer data. I would apply defense in depth: least-privilege IAM, network segmentation, encryption in transit and at rest, managed key lifecycle controls, centralized logging, continuous configuration monitoring, and vulnerability management. I would also threat-model the application, validate backup and incident-response processes, and map controls to applicable privacy and compliance requirements. How do SAML, OAuth, and OpenID Connect differ, and when would you use them? SAML is commonly used for enterprise browser-based single sign-on through signed XML assertions. OAuth 2.0 is an authorization framework for delegated access to APIs, while OpenID Connect adds an identity layer on top of OAuth 2.0 for authentication. I would generally use SAML or OIDC for workforce SSO depending on platform support, and OAuth/OIDC for modern application and API authorization flows. How would you conduct a threat model for a new service? I would define the service scope, architecture, assets, trust boundaries, data flows, and external dependencies. Using a structured method such as STRIDE, I would identify likely threats, assess likelihood and business impact, assign owners, and document mitigations such as stronger authentication, validation, rate limiting, encryption, monitoring, or design changes. The threat model should be revisited as the system changes. An alert suggests anomalous access to a production cloud account. What are your first actions? I would validate the alert and quickly establish scope using identity, API, endpoint, and network logs. If credible, I would contain the activity by disabling or restricting affected credentials and sessions while preserving evidence, then assess data exposure, eradicate the cause, recover safely, and communicate status through the incident process. Afterwards, I would lead a post-incident review focused on root cause, detection improvements, and durable preventative controls. At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you’ll thrive in an environment that champions curiosity, collaboration, and innovation, all while making meaningful contributions to the brands we accelerate. Join us in shaping the future of communication and building authentic connections that matter. Whether you’re solving complex problems or driving bold innovations, your growth is our success, and together, we’ll create the conversations of tomorrow. Empower your impact at Cision. Be seen, be understood, be you. This role strengthens and optimizes the organization’s security capabilities by reviewing existing tools, applications, and processes to identify gaps. It establishes and maintains cloud security architecture best practices, focusing on cloud platforms and integrates new and existing security platforms. The role collaborates with R&D teams to maintain a secure architecture and analyzes security events for anomalous activity. It contributes to the organization’s security posture and ensures a secure environment. The individual works on issues requiring the analysis of relevant factors and exercises considerable judgment within defined procedures to determine appropriate action. This individual will work across multiple departments to design, implement, and manage security solutions that protect both internal and third party (vendor) systems and customer data. You will play a critical role in ensuring that security practices are aligned with compliance requirements while driving technical solutions for secure systems and data protection across the entire organization. Responsibilities: • Security Engineering & Architecture: Must have expertise in designing, implementing, and maintaining security architectures across cloud, third-party, and on-premises environments, including evaluating and integrating emerging security technologies. • DevSecOps: Should possess deep knowledge of embedding security within CI/CD pipelines, establishing security standards, and conducting secure code reviews with development teams. • Cryptography: Must understand encryption technologies for securing data at rest and in transit, with experience managing cryptographic keys and ensuring compliance with industry standards. • Identity & Authentication: Requires knowledge of designing and managing secure identity solutions, including Single Sign-On (SSO), Identity Providers (IdPs), and federation protocols such as SAML, OAuth, and OpenID Connect. Familiarity with Okta and Keycloak preferred. • Secure Coding: Should be proficient in secure coding practices, training teams, and developing standards to prevent vulnerabilities like injection flaws, XSS, and authentication issues. • Governance, Risk, & Compliance (GRC): Must have a strong grasp of GRC frameworks (e.g., NIST, SOC2, ISO 27001, Cyber Essentials etc) and experience in aligning technical controls with regulatory and audit requirements. • Threat Management: Requires expertise in performing risk assessments, threat modeling, vulnerability assessments, and mitigation planning to address security risks. • Incident Response & Monitoring: Should have knowledge of incident response strategies, SOC collaboration, and implementing continuous monitoring tools to ensure compliance and security standards. • Collaboration & Leadership: Must demonstrate the ability to work with cross-functional teams, mentor junior engineers, and act as a subject matter expert in security technologies, tools, and frameworks. Requirements: • Deep understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (GDPR, HIPAA, PCI-DSS). • Hands-on experience with security tools such as IDS/IPS, SIEM, vulnerability scanners, and penetration testing platforms. • Experience with cloud platforms (AWS, Azure, GCP, OCI or Alibaba) and securing cloud-native applications. • Proficiency in programming languages (e.g., Python, Java, C++) and automation tools (e.g., Terraform, Ansible). • Strong knowledge of networking protocols, firewalls, VPNs, proxies, and security monitoring tools. • 5+ years of relevant experience in security engineering and GRC-focused security solutions development. • Extensive hands-on experience in DevSecOps, integrating security in CI/CD pipelines, and supporting development teams in secure coding practices. • Proven expertise in cryptography, including encryption, key management, and digital signatures. What we offer: * Friendly and welcoming environment focused on people, learning & development * 25 vacation days and extra vacation days after age and after children * Cafeteria benefit via SZEP card * Medicover private health insurance for employees and their family members * 10% of your time to work on anything you like, reading groups, tech talks * Flexible working and working from home * An extensive people development program, including access to Udemy Please note: * Candidates must be available for after-hours incident response when urgent security events require investigation or support. * The interview process will include a hands-on practical exercise conducted through screen sharing, where candidates will be asked to demonstrate relevant technical skills. Cision is the global leader in consumer and media intelligence, engagement, and communication solutions. We equip PR and corporate communications, marketing, and social media professionals with the tools they need to excel in today’s data driven world. Our deep expertise, exclusive data partnerships, and award-winning products, including [CisionOne](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4588888-1&h=1582545697&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D4484633-1%26h%3D279553938%26u%3Dhttps%253A%252F%252Fwww.cision.com%252F%26a%3DCisionOne&a=CisionOne), [Brandwatch](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4588888-1&h=3012343804&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D4484633-1%26h%3D3402596191%26u%3Dhttps%253A%252F%252Fwww.brandwatch.com%252F%26a%3DBrandwatch&a=Brandwatch), and [PR Newswire](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4588888-1&h=1961299488&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D4484633-1%26h%3D160139869%26u%3Dhttps%253A%252F%252Fwww.cision.com%252Fpr-distribution-and-placement%252Fprnewswire%252F%26a%3DPR%2BNewswire&a=PR+Newswire), enable over 75,000 companies and organizations, including 84% of the Fortune 500, to see and be seen, understand and be understood by the audiences that matter most to them. Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the [CEO Action for Diversity & Inclusion™ pledge](https://www.ceoaction.com/ceos/?Page=1&CompanyLetters=C&Sort=Alphabetical) and named a “Top Diversity Employer” for 2021 by [DiversityJobs.com](https://diversityjobs.com/). Cision is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other protected statuses. Cision is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Cision will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact hr.support@cision.com Cision, Inc. “the Company” only communicates with candidates and extends job offers through direct channels, not third parties. Please review our [Global Candidate Data Privacy Statement](https://www.cision.com/careers/cision-candidate-privacy-notice/) to learn about Cision’s commitment to protecting personal data collected during the hiring process. Show more [Apply now >](https://jobicy.com/jobs/151867-security-engineer-i-information-technology.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. Matched by job category10 related opportunities[Cybersecurity](https://jobicy.com/categories/cybersecurity.md) [Browse all jobs](https://jobicy.com/jobs.md) * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Aug 27 ### [Security Analyst I, Information Technology](https://jobicy.com/jobs/151862-security-analyst-i-information-technology.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![LastPass logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/13842160-221.png) LastPass Aug 27 ### [Principal Cloud Security Engineer](https://jobicy.com/jobs/151831-principal-cloud-security-engineer.md) About LastPassLastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and… * ![Pleo logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b27fbed2-221.jpg) Pleo Aug 27 ### [Lead Security Operations Engineer](https://jobicy.com/jobs/151792-lead-security-operations-engineer.md) About Pleo Messy spend management is tricky business. And tedious processes are a lose-lose situation for all involved, not just finance. At Pleo, we’re changing that. We build spend solutions… * ![Ada logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/666ef11e-221.png) Ada Aug 27 ### [Compliance and Security Lead](https://jobicy.com/jobs/151791-compliance-and-security-lead.md) About Us Ada is an AI customer service company whose mission is to make customer service extraordinary for everyone. We’re driven to raise a new standard of quality customer service… * ![Pleo logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b27fbed2-221.jpg) Pleo Aug 27 ### [Senior Application Security Manager](https://jobicy.com/jobs/151788-senior-application-security-manager.md) About Pleo Messy spend management is tricky business. And tedious processes are a lose-lose situation for all involved, not just finance. At Pleo, we’re changing that. We build spend solutions… * ![GitLab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201207055737-109952.jpg) GitLab Aug 27 ### [Senior Security Engineer, Security Incident Response Team (SIRT) – EMEA](https://jobicy.com/jobs/149309-senior-security-engineer-security-incident-response-team-sirt-emea.md) GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50… * ![Vercel logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/a6aded72-221.png) Vercel Aug 27 ### [Security Software Engineer, IAM](https://jobicy.com/jobs/147750-security-software-engineer-iam.md) About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built…. * ![Bloomreach logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/60790cd5-221.png) Bloomreach Aug 26 ### [Director, AI Enablement & Security](https://jobicy.com/jobs/151780-director-ai-enablement-security.md) Bloomreach is building the world’s premier agentic platform for personalization.We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We’re taking… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Aug 26 ### [Security Engineer, Infrastructure Security](https://jobicy.com/jobs/151778-security-engineer-infrastructure-security.md) About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products…. * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Aug 26 ### [Security Engineer, Agent Security](https://jobicy.com/jobs/151775-security-engineer-agent-security.md) About the TeamThe team’s mission is to accelerate the secure evolution of agentic AI systems at OpenAI. To achieve this, the team designs, implements, and continuously refines security policies, frameworks,…