Security Engineer

Overview

Strengthen and optimize Cision's security capabilities by reviewing tools, applications and processes, designing secure cloud and third-party architectures, and aligning security practices with compliance requirements.

What you'll do

• Design, implement, and maintain security architectures across cloud, third-party, and on-premises environments.
• Evaluate and integrate emerging security technologies to strengthen the organisation's security posture.
• Integrate security controls into CI/CD pipelines, establish secure development standards, and conduct secure code reviews in collaboration with development teams.
• Implement and maintain encryption mechanisms to protect data at rest and in transit.
• Manage cryptographic keys and ensure compliance with relevant security standards.
• Design and manage secure identity and access solutions, including Single Sign-On (SSO), Identity Providers (IdPs), and federation protocols such as SAML, OAuth, and OpenID Connect.
• Support the implementation and management of solutions such as Okta and Keycloak.
• Define and promote secure coding standards, advise development teams on application security, and provide guidance to prevent common vulnerabilities, including injection flaws, cross-site scripting (XSS), and authentication weaknesses.
• Implement and maintain technical security controls aligned with relevant frameworks and standards, including NIST, SOC 2, ISO 27001, and Cyber Essentials.
• Support compliance assessments, audits, and remediation activities.
• Conduct security risk assessments, threat modelling, and vulnerability assessments.
• Develop and coordinate mitigation plans to address identified risks and reduce the organisation's exposure to threats.
• Develop and support incident response processes, collaborate with Security Operations Centre (SOC) teams, and implement continuous monitoring capabilities to detect threats and maintain compliance with security requirements.
• Partner with cross-functional teams to embed security into systems and processes, mentor junior engineers, and provide technical guidance on security technologies, tools, architecture, and best practices.
• Collaborate with R&D teams to maintain a secure architecture and analyze security events for anomalous activity.

What you'll need

• Deep understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (GDPR, HIPAA, PCI-DSS).
• 5+ years of relevant experience in security engineering and GRC-focused security solutions development.
• Hands-on experience with security tools such as IDS/IPS, SIEM, vulnerability scanners, and penetration testing platforms.
• Experience with cloud platforms (AWS, Azure, GCP, OCI or Alibaba) and securing cloud-native applications.
• Proficiency in programming languages (e.g., Python, Java, C++) and automation tools (e.g., Terraform, Ansible).
• Strong knowledge of networking protocols, firewalls, VPNs, proxies, and security monitoring tools.
• Extensive hands-on experience in DevSecOps, integrating security in CI/CD pipelines, and supporting development teams in secure coding practices.
• Proven expertise in cryptography, including encryption, key management, and digital signatures.

Details

• Location: Remote - Hungary; Sofia, Bulgaria.