All remote jobs

Senior Security Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Remote from
Hungary, Bulgaria
Salary
Undisclosed
Department
Cybersecurity
Employment
Full Time
Experience
Senior
Published
Apply before
11 Nov 2026
Listing views
96
Application actions
5
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

The role, at a glance.

Cision is hiring a Senior Security Engineer to monitor, investigate, and respond to security activity across cloud, identity, endpoint, network, and Linux-based environments. The role centers on hands-on security operations, incident response support, log analysis, and automation using Python, Bash, or PowerShell. The engineer will work extensively with AWS and ideally GCP, SIEM platforms, Active Directory, Linux, Windows, and cloud IAM controls. Responsibilities also include security reviews, evidence collection, remediation support, and participation in urgent after-hours incident response.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

4/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

4/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a senior hands-on security operations role requiring practical investigation skills across multiple cloud, identity, endpoint, and operating-system environments. The after-hours incident-response expectation, scripting requirements, and practical technical assessment indicate a demanding role with meaningful operational accountability.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job medianMarket rate
$155,000
US market range$130k–$185k
AI insightNo actual salary, pay range, or compensation amount is disclosed in the posting. The figures are estimated annual USD base-salary benchmarks for a US-market Senior Security Engineer with 3-5 years of security operations, cloud security, incident response, SIEM, and automation experience; actual compensation may vary by location, scope, and total rewards.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you investigate a suspicious AWS IAM authentication event flagged by a SIEM?

I would first validate the alert context, including the user or role, source IP, geography, authentication method, timestamp, and associated API activity. I would correlate CloudTrail, IAM, VPC, and identity-provider logs to determine whether the event is expected, then assess for privilege escalation, unusual access keys, MFA changes, or data-access activity. If compromise is plausible, I would contain the account according to the incident process, preserve evidence, and document findings and remediation steps.

Describe a security automation task you would implement with Python, Bash, or PowerShell.

I would build an enrichment workflow that accepts SIEM alert indicators such as IP addresses, usernames, instance IDs, or hashes; queries relevant cloud and identity logs; normalizes the results; and produces a concise investigation summary. The script would include error handling, secure credential management, logging, and clear output so analysts can validate results quickly. I would test it with representative alert cases and refine it based on analyst feedback.

What indicators would make you suspect credential compromise or account takeover?

Indicators include impossible travel, unfamiliar IP addresses or devices, repeated failed logins followed by success, disabled or bypassed MFA, unusual OAuth consent, new access keys, privilege or group membership changes, and abnormal access to sensitive systems. I would also look for unusual mailbox rules, token use, lateral movement, and behavioral changes compared with the user's normal activity.

How would you assess an exposed cloud storage resource during a security review?

I would verify whether public access is enabled, inspect IAM and bucket policies, review ACLs, encryption settings, logging, retention controls, and the sensitivity of stored data. I would identify access paths and recent access events, determine whether exposure is intentional and approved, and recommend least-privilege remediation. I would then validate the fix and document the risk, owner, decision, and follow-up actions.

How do you communicate an ongoing security incident to technical and nontechnical stakeholders?

I provide a concise status that separates confirmed facts from hypotheses, explains business impact in plain language, and states current containment and next steps. For technical responders, I include relevant indicators, evidence sources, scope, and required actions. I maintain a time-stamped incident record and give regular updates until recovery, followed by a clear post-incident summary and improvement plan.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Opportunity details

About this role.

At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you’ll thrive in an environment that champions curiosity, collaboration, and innovation, all while making meaningful contributions to the brands we accelerate.

Join us in shaping the future of communication and building authentic connections that matter. Whether you’re solving complex problems or driving bold innovations, your growth is our success, and together, we’ll create the conversations of tomorrow.

Empower your impact at Cision. Be seen, be understood, be you.

We are seeking a Senior Security Engineer to help monitor, investigate, and respond to security activity across cloud, identity, endpoint, and Linux-based environments. This role requires hands-on technical ability, strong scripting skills, and practical experience working with AWS, with GCP experience preferred.

What You’ll Do

  • Monitor and investigate security alerts across cloud, identity, endpoint, and network environments.
  • Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools.
  • Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
  • Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment.
  • Assist with security reviews, including IAM, storage exposure, compute workloads, and network configurations.
  • Investigate authentication activity, user behavior, privilege changes, and potential account compromise.
  • Work with internal teams to understand systems, identify risks, and support remediation, compliance and audit activities.
  • Be available for after-hours incident response when urgent security events require investigation or support.

What You’ll Bring

  • Experience with cloud security concepts, services, logs, and IAM.
  • Strong scripting ability, preferably with Python, Bash, or PowerShell.
  • Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
  • Working knowledge of Linux and Windows systems, command line usage, permissions, processes, and logs.
  • Basic to intermediate understanding of Active Directory, including users, groups, authentication, and privilege changes.
  • Ability to read and interpret logs from cloud platforms, operating systems, and security tools.
  • Understanding of common security concepts such as phishing, credential compromise, privilege escalation, lateral movement, and exposed services.
  • Strong analytical, documentation, and communication skills.

Preferred Skills

  • Experience with Google Cloud Platform security, including IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, and service accounts.
  • Exposure to Kubernetes, containers, or cloud-native workloads.
  • Experience creating automation for security monitoring or response.
  • Experience with Github/Gitlab

Minimum Qualifications

  • 3-5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role.
  • Hands-on experience using scripts to solve operational or security problems.
  • Comfortable working in both cloud and Linux command-line environments.

Please note:

  • Candidates must be available for after-hours incident response when urgent security events require investigation or support.
  • The interview process will include a hands-on practical exercise conducted through screen sharing, where candidates will be asked to demonstrate relevant technical skills.

As a global leader in PR, marketing and social media management technology and intelligence, Cision helps brands and organizations to identify, connect and engage with customers and stakeholders to drive business results. PR Newswire, a network of over 1.1 billion influencers, in-depth monitoring, analytics and its Brandwatch and Falcon.io social media platforms headline a premier suite of solutions. Cision has offices in 24 countries throughout the Americas, EMEA and APAC. For more information about Cision’s award-winning solutions, including its next-gen Cision Communications Cloud®, visit www.cision.com and follow @Cision on Twitter.

Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the CEO Action for Diversity & Inclusion™ pledge and named a “Top Diversity Employer” for 2021 by DiversityJobs.com.

Cision is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other protected statuses.

Cision is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Cision will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact hr.support@cision.com

Please review our Global Candidate Data Privacy Statement to learn about Cision’s commitment to protecting personal data collected during the hiring process.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Applying is free. After signing in, return to this job and select Apply Now.
Add alert
Jobs Talent AI Tools Salaries
Menu