Senior Security Engineer

Overview

In this role you will safeguard Docebo's AWS-based platform, partnering with infrastructure, operations and engineering teams to implement strong security controls across the stack. You will drive automated defenses, threat detection, and secure configurations, influencing incident response and risk remediation. Your work protects millions of learners and helps scale a mission-driven, AI-powered learning platform. This is a high-visibility role that rewards ownership and practical security leadership.

Retribuzione / Benefits

• ESPP with 15% discount
• health benefits
• paid vacation days
• Docebo Days
• floating holidays
• birthday off

Responsabilità

• Own the security posture of multi-account AWS environments, defining secure account structures and baseline configurations
• Integrate proactive security controls and automated scanning into IaC (Terraform/CloudFormation) workflows and CI/CD pipelines
• Develop and tune cloud-native threat detection using CloudTrail, GuardDuty and SIEM integrations; participate in incident response on-call
• Manage vulnerability and configuration management across cloud workloads with CSPM/CNAPP tools and rapid remediation
• Architect and enforce least privilege through IAM, service accounts, and JIT access where appropriate
• Create and evangelize cloud security standards, runbooks and policies to foster a security-conscious culture
• Maintain vendor relationships with security tool providers and handle complex edge cases

Requisiti fondamentali

• 5+ years in cybersecurity with hands-on security of high-scale AWS environments (IAM, SCPs, KMS, VPC, CloudTrail)
• Strong Kubernetes security expertise (RBAC, pod security standards, network policies, container image supply chain risks)
• Proficiency in Infrastructure as Code and scripting (Python or Bash) for automation and tooling
• Experience with SIEM, threat hunting and frameworks such as MITRE ATT&CK, CIS Benchmarks, NIST CSF, AWS Well-Architected
• Ability to work under pressure, participate in on-call rotation, and document risk for cross-functional teams
• Bonus: multi-cloud experience (Azure/GCP) and cloud/security certifications (AWS or ISC2/SANS/ISACA/CompTIA)
• ownership and accountability
• calm under pressure
• collaboration across teams
• AWS security (IAM, SCPs, KMS, VPC, CloudTrail)
• Kubernetes security (RBAC, network policies, pod security)
• IaC (Terraform, CloudFormation)