Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
Senior Security Engineer
Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.
- Salary
- Undisclosed
- Department
- Cybersecurity
- Employment
- Full Time
- Experience
- Senior
- Published
- Apply before
- 11 Nov 2026
- Listing views
- 96
- Application actions
- 5
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
The role, at a glance.
Cision is hiring a Senior Security Engineer to monitor, investigate, and respond to security activity across cloud, identity, endpoint, network, and Linux-based environments. The role centers on hands-on security operations, incident response support, log analysis, and automation using Python, Bash, or PowerShell. The engineer will work extensively with AWS and ideally GCP, SIEM platforms, Active Directory, Linux, Windows, and cloud IAM controls. Responsibilities also include security reviews, evidence collection, remediation support, and participation in urgent after-hours incident response.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would first validate the alert context, including the user or role, source IP, geography, authentication method, timestamp, and associated API activity. I would correlate CloudTrail, IAM, VPC, and identity-provider logs to determine whether the event is expected, then assess for privilege escalation, unusual access keys, MFA changes, or data-access activity. If compromise is plausible, I would contain the account according to the incident process, preserve evidence, and document findings and remediation steps.
I would build an enrichment workflow that accepts SIEM alert indicators such as IP addresses, usernames, instance IDs, or hashes; queries relevant cloud and identity logs; normalizes the results; and produces a concise investigation summary. The script would include error handling, secure credential management, logging, and clear output so analysts can validate results quickly. I would test it with representative alert cases and refine it based on analyst feedback.
Indicators include impossible travel, unfamiliar IP addresses or devices, repeated failed logins followed by success, disabled or bypassed MFA, unusual OAuth consent, new access keys, privilege or group membership changes, and abnormal access to sensitive systems. I would also look for unusual mailbox rules, token use, lateral movement, and behavioral changes compared with the user's normal activity.
I would verify whether public access is enabled, inspect IAM and bucket policies, review ACLs, encryption settings, logging, retention controls, and the sensitivity of stored data. I would identify access paths and recent access events, determine whether exposure is intentional and approved, and recommend least-privilege remediation. I would then validate the fix and document the risk, owner, decision, and follow-up actions.
I provide a concise status that separates confirmed facts from hypotheses, explains business impact in plain language, and states current containment and next steps. For technical responders, I include relevant indicators, evidence sources, scope, and required actions. I maintain a time-stamped incident record and give regular updates until recovery, followed by a clear post-incident summary and improvement plan.
About this role.
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you’ll thrive in an environment that champions curiosity, collaboration, and innovation, all while making meaningful contributions to the brands we accelerate.
Join us in shaping the future of communication and building authentic connections that matter. Whether you’re solving complex problems or driving bold innovations, your growth is our success, and together, we’ll create the conversations of tomorrow.
Empower your impact at Cision. Be seen, be understood, be you.
We are seeking a Senior Security Engineer to help monitor, investigate, and respond to security activity across cloud, identity, endpoint, and Linux-based environments. This role requires hands-on technical ability, strong scripting skills, and practical experience working with AWS, with GCP experience preferred.
What You’ll Do
- Monitor and investigate security alerts across cloud, identity, endpoint, and network environments.
- Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools.
- Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
- Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment.
- Assist with security reviews, including IAM, storage exposure, compute workloads, and network configurations.
- Investigate authentication activity, user behavior, privilege changes, and potential account compromise.
- Work with internal teams to understand systems, identify risks, and support remediation, compliance and audit activities.
- Be available for after-hours incident response when urgent security events require investigation or support.
What You’ll Bring
- Experience with cloud security concepts, services, logs, and IAM.
- Strong scripting ability, preferably with Python, Bash, or PowerShell.
- Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
- Working knowledge of Linux and Windows systems, command line usage, permissions, processes, and logs.
- Basic to intermediate understanding of Active Directory, including users, groups, authentication, and privilege changes.
- Ability to read and interpret logs from cloud platforms, operating systems, and security tools.
- Understanding of common security concepts such as phishing, credential compromise, privilege escalation, lateral movement, and exposed services.
- Strong analytical, documentation, and communication skills.
Preferred Skills
- Experience with Google Cloud Platform security, including IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, and service accounts.
- Exposure to Kubernetes, containers, or cloud-native workloads.
- Experience creating automation for security monitoring or response.
- Experience with Github/Gitlab
Minimum Qualifications
- 3-5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role.
- Hands-on experience using scripts to solve operational or security problems.
- Comfortable working in both cloud and Linux command-line environments.
Please note:
- Candidates must be available for after-hours incident response when urgent security events require investigation or support.
- The interview process will include a hands-on practical exercise conducted through screen sharing, where candidates will be asked to demonstrate relevant technical skills.
As a global leader in PR, marketing and social media management technology and intelligence, Cision helps brands and organizations to identify, connect and engage with customers and stakeholders to drive business results. PR Newswire, a network of over 1.1 billion influencers, in-depth monitoring, analytics and its Brandwatch and Falcon.io social media platforms headline a premier suite of solutions. Cision has offices in 24 countries throughout the Americas, EMEA and APAC. For more information about Cision’s award-winning solutions, including its next-gen Cision Communications Cloud®, visit www.cision.com and follow @Cision on Twitter.
Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the CEO Action for Diversity & Inclusion™ pledge and named a “Top Diversity Employer” for 2021 by DiversityJobs.com.
Cision is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other protected statuses.
Cision is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Cision will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact hr.support@cision.com
Please review our Global Candidate Data Privacy Statement to learn about Cision’s commitment to protecting personal data collected during the hiring process.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
