Senior Cloud Security Engineer—AWS & IAM

Docebo; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Health benefits

Paid vacation days

Docebo Days and company events

Job summary

Docebo, a leading AI-powered learning platform, seeks a Senior Security Engineer to secure its AWS cloud and CI/CD stack. You will design, implement, and continuously improve cloud security controls while partnering with Cloud Infra, Engineering, and security teams.

The role focuses on risk reduction, on-call incident response, and automation to protect infrastructure across multi-account environments. Hybrid work is supported.

Qualifications

• 5+ years of cybersecurity experience with a focus on cloud security in production AWS environments.
• Deep hands-on experience with AWS security services (IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security).
• Kubernetes security knowledge including RBAC, pod security standards, network policies, admission controllers, and secrets management.

Responsibilities

• Own security architecture and hardening of Docebo's AWS environments and multi-account setups.
• Integrate security controls into IaC workflows and CI/CD pipelines (shift-left).
• Lead on-call incidents, triage, containment, and post-mortems with automation support.
• Build and maintain cloud threat detection using CloudTrail, GuardDuty, SIEM integrations.
• Define IAM policies, least privilege, cross‑account roles, and JIT access.
• Develop security best practices, documents, and training for engineers and infra teams.

Skills

Cloud security

AWS security services

Kubernetes security

IaC security

SIEM/detection engineering

Automation/AI tooling

Scripting (Python/Bash)

IAM fundamentals

Multi-cloud (Azure/GCP)

Education

Security certifications (ISC2/ISACA/SANS/CompTIA)

Tools

Terraform

CloudFormation

CloudTrail

GuardDuty

Config

KMS

CI/CD security tooling

Job description

Docebo, a leading AI-powered learning platform, seeks a Senior Security Engineer to secure its AWS cloud and CI/CD stack. You will design, implement, and continuously improve cloud security controls while partnering with Cloud Infra, Engineering, and security teams.

The role focuses on risk reduction, on-call incident response, and automation to protect infrastructure across multi-account environments. Hybrid work is supported.