3 months ago
Responsibilities
- Monitor and investigate security alerts across cloud, identity, endpoint, and network environments.
- Review activity and logs from AWS, GCP, Active Directory, Linux, Windows, and security tools.
- Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
- Write scripts to automate security tasks, log analysis, reporting, and enrichment.
- Conduct security reviews of IAM, storage exposure, compute workloads, and network configurations.
- Investigate authentication activity, user behavior, privilege changes, and potential account compromise.
- Collaborate with internal teams to identify risks and support remediation, compliance, and audit activities.
- Provide after-hours support for urgent security incidents.
Requirements
- 3-5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role.
- Hands-on experience using scripts to solve operational or security problems.
- Experience with cloud security concepts, services, logs, and IAM, including practical AWS experience.
- Strong scripting ability with Python, Bash, or PowerShell preferred.
- Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
- Working knowledge of Linux and Windows systems, command-line usage, permissions, processes, and logs.
- Basic to intermediate understanding of Active Directory, including users, groups, authentication, and privilege changes.
- Ability to interpret logs from cloud platforms, operating systems, and security tools.
- Understanding of phishing, credential compromise, privilege escalation, lateral movement, and exposed services.
- Google Cloud Platform security experience, including IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, and service accounts, is preferred.
- Exposure to Kubernetes, containers, or cloud-native workloads is preferred.
- Strong analytical, documentation, and communication skills.
- Comfort working in cloud and Linux command-line environments.
Benefits
- 25 vacation days, with additional vacation days after age and after having children.
- Cafeteria benefit via SZEP card.
- Medicover private health insurance for employees and family members.
- 10% of work time for personal projects, reading groups, and tech talks.
- Flexible working and working from home.
- People development program with access to Udemy.
- After-hours incident response availability is required when urgent security events occur.
Tech Stack
Categories
About Cision
Cision is the global leader in consumer and media intelligence, engagement, and communication solutions. We equip PR and corporate communications, marketing, and social media professionals with the tools they need to excel in today’s data-driven world. Our deep expertise, exclusive data partnerships, and award-winning brands and products, including CisionOne, Brandwatch, and PR Newswire, enable over 75,000 companies and organizations, including 84% of the Fortune 500, to see and be seen, understand and be understood by the audiences that matter most to them. Interested in working for Cision? Visit cision.com/careers for available opportunities!