Security Engineer

About the role

Cision is looking for a Security Engineer to strengthen and optimise its security capabilities. The role reviews existing tools, applications and processes to find gaps, sets and maintains cloud security best practices, integrates new and existing security platforms and works with R&D teams to keep the architecture secure. It also analyses security events for anomalous activity and protects internal, vendor and customer data.

Key responsibilities

• Design, implement and maintain security architectures across cloud, third-party and on-premises environments, and integrate emerging security technologies.
• Integrate security controls into CI/CD pipelines, set secure development standards and run secure code reviews with developers.
• Implement encryption for data at rest and in transit, manage cryptographic keys and support Okta and Keycloak.
• Define secure coding standards and guide teams against injection flaws, XSS and authentication weaknesses.
• Support compliance with NIST, SOC 2, ISO 27001 and Cyber Essentials, and run risk assessments, threat modelling and vulnerability assessments.
• Build incident response processes, work with SOC teams and set up continuous monitoring.
• Mentor junior engineers and share security best practices across departments.

Required profile

• 5+ years of experience in security engineering and GRC-focused security solutions.
• Deep knowledge of NIST, ISO 27001, CIS Controls and regulations such as GDPR, HIPAA and PCI-DSS.
• Hands-on experience with IDS/IPS, SIEM, vulnerability scanners and penetration testing tools.
• Experience securing cloud-native applications on AWS, Azure, GCP, OCI or Alibaba.
• DevSecOps experience and proven expertise in cryptography, encryption and key management.

Required skills

• Programming: Python, Java, C++
• Automation: Terraform, Ansible
• Networking: firewalls, VPNs, proxies, security monitoring tools