[All remote jobs](https://jobicy.com/jobs.md)[![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg)](https://jobicy.com/company/cision.md)[Cision](https://jobicy.com/company/cision.md)

# Security Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

[Apply for this job](#job-application)[View company](https://jobicy.com/company/cision.md)ShareRemote from[Hungary](https://jobicy.com/job-region/hungary.md), [Bulgaria](https://jobicy.com/job-region/bulgaria.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceEntry-Level, JuniorPublished16 Oct 2026Apply before15 Nov 2026Listing views47Application actions2Application toolkit

## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

## The role, at a glance.

Cision is seeking a Security Engineer to strengthen security architecture across cloud, on-premises, and third-party environments. The role combines cloud security, DevSecOps, application security, identity and access management, cryptography, vulnerability management, and incident-response support. The engineer will partner closely with R&D and cross-functional teams to embed security controls into systems, CI/CD pipelines, and development practices. Responsibilities also include supporting compliance with frameworks such as NIST, ISO 27001, SOC 2, and Cyber Essentials while mentoring junior engineers.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

5/5EasyHard

### Pace & Pressure

4/5RelaxedFast-paced

### Autonomy Level

4/5GuidedFull ownership

### Communication Load

5/5IndependentCollaborative

AI insightThis is a senior-level, broad security engineering position requiring at least five years of experience across cloud, application, infrastructure, IAM, cryptography, compliance, and DevSecOps. The role demands sound independent judgment and the ability to influence technical and non-technical stakeholders across multiple departments.

## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate$125,000US market range (per year)$105k–$150k0$165k

AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer compensation was disclosed. The displayed amounts are estimated annual USD market compensation for a mid-to-senior Security Engineer with cloud security, DevSecOps, IAM, and compliance responsibilities; the yearly cadence is inferred from the full-time professional role.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[DevSecOps](https://jobicy.com/jobs?search_keywords=DevSecOps.md)[CI/CD Security](https://jobicy.com/jobs?search_keywords=CICD%20Security.md)[Application Security](https://jobicy.com/jobs?search_keywords=Application%20Security.md)[Secure Code Review](https://jobicy.com/jobs?search_keywords=Secure%20Code%20Review.md)[Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[SSO](https://jobicy.com/jobs?search_keywords=SSO.md)[SAML](https://jobicy.com/jobs?search_keywords=SAML.md)[OAuth](https://jobicy.com/jobs?search_keywords=OAuth.md)[Cryptography](https://jobicy.com/jobs?search_keywords=Cryptography.md)[Key Management](https://jobicy.com/jobs?search_keywords=Key%20Management.md)[Vulnerability Management](https://jobicy.com/jobs?search_keywords=Vulnerability%20Management.md)[SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md)[NIST](https://jobicy.com/jobs?search_keywords=NIST.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)

Sample interview questionsHow would you integrate security controls into an existing CI/CD pipeline without creating excessive friction for developers?I would start by mapping the current pipeline and identifying high-value automated controls, such as secret scanning, SAST, dependency scanning, infrastructure-as-code scanning, and container image scanning. I would establish severity thresholds and remediation SLAs, initially using advisory mode where needed, then progressively enforce blocking only for material risks. Clear developer guidance, fast feedback, and exception processes are essential to make the controls sustainable.

Describe your approach to securing a cloud-native application handling sensitive customer data.

I would use defense in depth: least-privilege IAM, network segmentation, encryption in transit and at rest, centralized key management, secure secrets storage, hardened workloads, continuous logging, and vulnerability management. I would also threat-model the application and data flows, validate backups and recovery, and ensure monitoring detects anomalous access or configuration drift. Controls should be mapped to the organization’s risk profile and applicable requirements such as ISO 27001 or SOC 2.

What would you review when evaluating an identity provider implementation using SAML or OAuth/OIDC?

I would verify strong authentication and MFA policies, least-privilege role design, secure token and assertion validation, appropriate signing and encryption settings, redirect URI restrictions, session lifetime controls, and robust account provisioning and deprovisioning. I would also review logging, break-glass access, service-account governance, and whether authorization decisions are consistently enforced by downstream applications.

How do you prioritize findings from vulnerability assessments and security risk assessments?

I prioritize based on exploitability, business impact, data sensitivity, exposure, compensating controls, and the likelihood of active exploitation rather than CVSS alone. Internet-facing issues, privilege-escalation paths, exposed secrets, and vulnerabilities affecting sensitive data receive immediate attention. I document risk ownership, remediation deadlines, and accepted-risk decisions, then validate that fixes are effective.

Give an example of how you would support an incident involving suspicious activity in a cloud environment.

I would first contain the potential impact by preserving evidence, restricting compromised identities or workloads, and protecting critical services. I would analyze identity, audit, network, endpoint, and application logs to establish the scope and attack path, then coordinate remediation with relevant engineering and operations teams. After recovery, I would lead a lessons-learned review and implement durable improvements such as tighter IAM controls, detection rules, and runbook updates.

Opportunity details

## About this role.

At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you’ll thrive in an environment that champions curiosity, collaboration, and innovation, all while making meaningful contributions to the brands we accelerate.

Join us in shaping the future of communication and building authentic connections that matter. Whether you’re solving complex problems or driving bold innovations, your growth is our success, and together, we’ll create the conversations of tomorrow.

Empower your impact at Cision. Be seen, be understood, be you.

This role strengthens and optimizes the organization’s security capabilities by reviewing existing tools, applications, and processes to identify gaps. It establishes and maintains cloud security architecture best practices, focusing on cloud platforms and integrates new and existing security platforms. The role collaborates with R&D teams to maintain a secure architecture and analyzes security events for anomalous activity. It contributes to the organization’s security posture and ensures a secure environment. The individual works on issues requiring the analysis of relevant factors and exercises considerable judgment within defined procedures to determine appropriate action.

This individual will work across multiple departments to design, implement, and manage security solutions that protect both internal and third party (vendor) systems and customer data. You will play a critical role in ensuring that security practices are aligned with compliance requirements while driving technical solutions for secure systems and data protection across the entire organization.

Responsibilities:

* Design, implement, and maintain security architectures across cloud, third-party, and on-premises environments. Evaluate and integrate emerging security technologies to strengthen the organisation’s security posture.
* Integrate security controls into CI/CD pipelines, establish secure development standards, and conduct secure code reviews in collaboration with development teams.
* Implement and maintain encryption mechanisms to protect data at rest and in transit. Manage cryptographic keys and ensure compliance with relevant security standards.
* Design and manage secure identity and access solutions, including Single Sign-On (SSO), Identity Providers (IdPs), and federation protocols such as SAML, OAuth, and OpenID Connect. Support the implementation and management of solutions such as Okta and Keycloak.
* Define and promote secure coding standards, advise development teams on application security, and provide guidance to prevent common vulnerabilities, including injection flaws, cross-site scripting (XSS), and authentication weaknesses.
* Implement and maintain technical security controls aligned with relevant frameworks and standards, including NIST, SOC 2, ISO 27001, and Cyber Essentials. Support compliance assessments, audits, and remediation activities.
* Conduct security risk assessments, threat modelling, and vulnerability assessments. Develop and coordinate mitigation plans to address identified risks and reduce the organisation’s exposure to threats.
* Develop and support incident response processes, collaborate with Security Operations Centre (SOC) teams, and implement continuous monitoring capabilities to detect threats and maintain compliance with security requirements.
* Partner with cross-functional teams to embed security into systems and processes, mentor junior engineers, and provide technical guidance on security technologies, tools, architecture, and best practices.

Requirements:

* Deep understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (GDPR, HIPAA, PCI-DSS).
* 5+ years of relevant experience in security engineering and GRC-focused security solutions development.
* Hands-on experience with security tools such as IDS/IPS, SIEM, vulnerability scanners, and penetration testing platforms.
* Experience with cloud platforms (AWS, Azure, GCP, OCI or Alibaba) and securing cloud-native applications.
* Proficiency in programming languages (e.g., Python, Java, C++) and automation tools (e.g., Terraform, Ansible).
* Strong knowledge of networking protocols, firewalls, VPNs, proxies, and security monitoring tools.
* Extensive hands-on experience in DevSecOps, integrating security in CI/CD pipelines, and supporting development teams in secure coding practices.
* Proven expertise in cryptography, including encryption, key management, and digital signatures.

Cision is the global leader in consumer and media intelligence, engagement, and communication solutions. We equip PR and corporate communications, marketing, and social media professionals with the tools they need to excel in today’s data driven world. Our deep expertise, exclusive data partnerships, and award-winning products, including [CisionOne](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4588888-1&h=1582545697&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D4484633-1%26h%3D279553938%26u%3Dhttps%253A%252F%252Fwww.cision.com%252F%26a%3DCisionOne&a=CisionOne), [Brandwatch](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4588888-1&h=3012343804&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D4484633-1%26h%3D3402596191%26u%3Dhttps%253A%252F%252Fwww.brandwatch.com%252F%26a%3DBrandwatch&a=Brandwatch), and [PR Newswire](https://edge.prnewswire.com/c/link/?t=0&l=en&o=4588888-1&h=1961299488&u=https%3A%2F%2Fc212.net%2Fc%2Flink%2F%3Ft%3D0%26l%3Den%26o%3D4484633-1%26h%3D160139869%26u%3Dhttps%253A%252F%252Fwww.cision.com%252Fpr-distribution-and-placement%252Fprnewswire%252F%26a%3DPR%2BNewswire&a=PR+Newswire), enable over 75,000 companies and organizations, including 84% of the Fortune 500, to see and be seen, understand and be understood by the audiences that matter most to them.

Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the [CEO Action for Diversity & Inclusion™ pledge](https://www.ceoaction.com/ceos/?Page=1&CompanyLetters=C&Sort=Alphabetical) and named a “Top Diversity Employer” for 2021 by [DiversityJobs.com](https://diversityjobs.com/).

Cision is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other protected statuses.

Cision is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Cision will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact hr.support@cision.com

Cision, Inc. “the Company” only communicates with candidates and extends job offers through direct channels, not third parties.

Please review our [Global Candidate Data Privacy Statement](https://www.cision.com/careers/cision-candidate-privacy-notice/) to learn about Cision’s commitment to protecting personal data collected during the hiring process.

Show more

[Apply now >](https://jobicy.com/jobs/155437-security-engineer-3.md)

>  Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

*
![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg)
CertiK Oct 16  New

### [Security Research Internship](https://jobicy.com/jobs/155448-security-research-internship.md)

About CertiK One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured…

*
![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg)
Cision Oct 16  New

### [IAM Security Engineer](https://jobicy.com/jobs/155431-iam-security-engineer.md)

At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As…

*
![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg)
Samsara Oct 16  New

### [Senior Security Operations Engineer](https://jobicy.com/jobs/155429-senior-security-operations-engineer-3.md)

Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of…

*
![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg)
Huntress Oct 16  New

### [Principal Security Researcher – EDR (Windows)](https://jobicy.com/jobs/155418-principal-security-researcher-edr-windows.md)

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at…

*
![Vercel logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/a6aded72-221.png)
Vercel Oct 16  New

### [Security Software Engineer, IAM](https://jobicy.com/jobs/147750-security-software-engineer-iam.md)

About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built….

*
![Socket logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/1314ce3c-221.png)
Socket Oct 16  New

### [Forward Deployed Engineer, Python](https://jobicy.com/jobs/153341-forward-deployed-engineer-python.md)

About Us Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our…

*
![Close logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/Closeio.png)
Close Oct 15  New

### [Senior Product Security Engineer (USA Only, 100% Remote)](https://jobicy.com/jobs/155398-senior-product-security-engineer-usa-only-100-remote.md)

About UsSince 2013, we’ve been building a CRM that gets out of your way and helps your team sell more, faster. Now we’re building AI into every part of it,…

*
![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png)
UpGuard Oct 15  New

### [Chief Information Security Officer](https://jobicy.com/jobs/153270-chief-information-security-officer-2.md)

Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk…

*
![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg)
Huntress Oct 14

### [Principal macOS Security Researcher](https://jobicy.com/jobs/155303-principal-macos-security-researcher.md)

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at…

*
![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg)
Beyond Finance Oct 14

### [Senior Cloud Security Engineer](https://jobicy.com/jobs/155257-senior-cloud-security-engineer.md)

At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,…

[Browse all jobs](https://jobicy.com/jobs.md)