5 hours ago
Remote, Hungary or Sofia, BulgariaMid Level / Senior
Responsibilities
- Monitor and investigate security alerts across cloud, identity, endpoint, and network environments.
- Review logs and activity from AWS, GCP, Active Directory, Linux, Windows, and security tools.
- Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
- Write scripts to automate security tasks such as log analysis, reporting, enrichment, monitoring, and response.
- Assist with security reviews covering IAM, storage exposure, compute workloads, and network configurations.
- Investigate authentication activity, user behavior, privilege changes, and potential account compromise.
- Work with internal teams to identify risks and support remediation, compliance, and audit activities.
- Participate in urgent after-hours incident response when required.
Requirements
- 3–5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role.
- Hands-on experience using scripts to solve operational or security problems.
- Experience with cloud security concepts, services, logs, and IAM, particularly AWS; GCP experience is preferred.
- Strong scripting ability with Python, Bash, or PowerShell preferred.
- Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
- Working knowledge of Linux and Windows systems, command-line usage, permissions, processes, and logs.
- Basic to intermediate knowledge of Active Directory, including users, groups, authentication, and privilege changes.
- Ability to interpret cloud, operating-system, and security-tool logs and understand common security threats.
- Preferred experience with GCP IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, service accounts, Kubernetes, containers, or cloud-native workloads.
- Strong analytical, documentation, and communication skills.
- Availability for urgent after-hours incident response and participation in a hands-on screen-sharing technical exercise.
Tech Stack
Categories
About Cision
Cision builds media monitoring, social listening, and PR workflow software plus press release distribution for PR, marketing, and corporate communications teams. The company sells subscriptions and distribution services through brands including PR Newswire, Brandwatch, and CisionOne. Headquartered in Chicago, it is privately held by Platinum Equity and operates globally in more than 20 countries.