Lead Cloud Security Engineer — AWS Guardrails & Automation

Docebo; Italia; Ibrido; EUR 90.000 - 140.000; Tempo pieno

Vantaggi offerti da questo lavoro

ESPP discount

Health benefits

Paid vacation days

Docebo Days (2)

Descrizione del lavoro

Docebo seeks a Senior Security Engineer to own the security posture of our AWS cloud, collaborating with Cloud Infrastructure, Operations and Engineering. You will implement secure controls across IaC pipelines and container environments, align with MITRE ATT&CK for Cloud, and drive rapid remediation with engineering teams.

The role requires hands-on cloud security, container security, automation skills, and the ability to operate in a high-ownership, on-call capable team.

Competenze

• 5+ years of battle-tested cybersecurity experience securing high-scale AWS environments (IAM, SCPs, KMS).
• Hands-on kubernetes security: RBAC, PodSecurity, network policies, image supply chain.

Mansioni

• Own the security posture of Docebo's AWS environments and multi-account setups.
• Integrate proactive security controls into IaC (Terraform/CloudFormation) workflows and CI/CD pipelines.
• Build and tune cloud-native threat detection using MITRE ATT&CK for Cloud, CloudTrail, and SIEM integrations.
• Lead vulnerability and configuration management across cloud workloads with CSPM/CWPP/CNAPP tooling.
• Define robust identity boundaries across AWS IAM, service accounts, and federated systems, enabling Just‑In‑Time access.

Conoscenze

Cloud security

Container security

Automation scripting

Detection engineering

Operational ownership

Strumenti

Terraform

CloudFormation

AWS

Kubernetes

GuardDuty/CloudTrail

SIEM

Descrizione del lavoro

Docebo seeks a Senior Security Engineer to own the security posture of our AWS cloud, collaborating with Cloud Infrastructure, Operations and Engineering. You will implement secure controls across IaC pipelines and container environments, align with MITRE ATT&CK for Cloud, and drive rapid remediation with engineering teams.

The role requires hands-on cloud security, container security, automation skills, and the ability to operate in a high-ownership, on-call capable team.