Cision - Security Engineer
Requirements
• Deep understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (GDPR, HIPAA, PCI-DSS). • 5+ years of relevant experience in security engineering and GRC-focused security solutions development. • Hands-on experience with security tools such as IDS/IPS, SIEM, vulnerability scanners, and penetration testing platforms. • Experience with cloud platforms (AWS, Azure, GCP, OCI or Alibaba) and securing cloud-native applications. • Proficiency in programming languages (e.g., Python, Java, C++) and automation tools (e.g., Terraform, Ansible). • Strong knowledge of networking protocols, firewalls, VPNs, proxies, and security monitoring tools. • Extensive hands-on experience in DevSecOps, integrating security in CI/CD pipelines, and supporting development teams in secure coding practices. • Proven expertise in cryptography, including encryption, key management, and digital signatures. • Cision is the global leader in consumer and media intelligence, engagement, and communication solutions. We equip PR and corporate communications, marketing, and social media professionals with the tools they need to excel in today's data driven world. Our deep expertise, exclusive data partnerships, and award-winning products, including CisionOne, Brandwatch, and PR Newswire, enable over 75,000 companies and organizations, including 84% of the Fortune 500, to see and be seen, understand and be understood by the audiences that matter most to them. • CisionOne • Brandwatch • PR Newswire • Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the CEO Action for Diversity & Inclusion™ pledge and named a “Top Diversity Employer” for 2021 by DiversityJobs.com.
Responsibilities
• Design, implement, and maintain security architectures across cloud, third-party, and on-premises environments. Evaluate and integrate emerging security technologies to strengthen the organisation’s security posture. • Integrate security controls into CI/CD pipelines, establish secure development standards, and conduct secure code reviews in collaboration with development teams. • Implement and maintain encryption mechanisms to protect data at rest and in transit. Manage cryptographic keys and ensure compliance with relevant security standards. • Design and manage secure identity and access solutions, including Single Sign-On (SSO), Identity Providers (IdPs), and federation protocols such as SAML, OAuth, and OpenID Connect. Support the implementation and management of solutions such as Okta and Keycloak. • Define and promote secure coding standards, advise development teams on application security, and provide guidance to prevent common vulnerabilities, including injection flaws, cross-site scripting (XSS), and authentication weaknesses. • Implement and maintain technical security controls aligned with relevant frameworks and standards, including NIST, SOC 2, ISO 27001, and Cyber Essentials. Support compliance assessments, audits, and remediation activities. • Conduct security risk assessments, threat modelling, and vulnerability assessments. Develop and coordinate mitigation plans to address identified risks and reduce the organisation’s exposure to threats. • Develop and support incident response processes, collaborate with Security Operations Centre (SOC) teams, and implement continuous monitoring capabilities to detect threats and maintain compliance with security requirements. • Partner with cross-functional teams to embed security into systems and processes, mentor junior engineers, and provide technical guidance on security technologies, tools, architecture, and best practices.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT