Senior Cloud Security Engineer (AWS) — On-Call

Docebo; Turbigo; On-site; EUR 51,000 - 55,000; Full time

Job summary

Docebo is seeking a Senior Security Engineer to secure our AWS environments and guide cloud security architecture. You will own security controls, guardrails, and vulnerability remediation while partnering with Cloud Infra, Engineering, and security teams.

You’ll participate in on-call rotations, craft runbooks, and advance detection across CloudTrail/GuardDuty. Strong IAM, CSPM, and IaC security experience are essential, with multi-cloud familiarity a plus.

Qualifications

• 5+ years of cybersecurity, with cloud security in production AWS environments.
• Deep hands-on experience with AWS security services: IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security.
• Good knowledge of Kubernetes security – RBAC, pod security standards, network policies, admission controllers, secrets management.
• Experience with CSPM and CWPP/CNAPP tools.
• Experience securing IaC pipelines (Terraform, CloudFormation) and CI/CD security.
• Proficient in container security and runtime protection.
• Experience with SIEM and cloud threat detection across CloudTrail and logs.
• Familiarity with automation/AI driven security tools and scripting (Python, Bash).
• Strong IAM fundamentals and least-privilege enforcement across cross-account access.
• Multi-cloud exposure (Azure/GCP) is a plus.

Responsibilities

• Own the security posture of Docebo’s AWS environments and enforce secure baselines.
• Integrate security into IaC workflows and CI/CD pipelines.
• Lead on-call rotation and incident postmortems with clear documentation.
• Build detection coverage for cloud-native threats using CloudTrail, GuardDuty, SIEM.
• Manage vulnerability and configuration remediation with engineering teams.
• Define and enforce least-privilege IAM across the org.

Skills

AWS Security

IAM & SCPs

Kubernetes Security

IaC Security

CI/CD Security

SIEM & Detections

Python Bash

On-Call

Documentation

Multi-Cloud

Tools

Terraform

CloudFormation

CloudTrail

GuardDuty

Config

KMS

VPC Security

Job description

Docebo is seeking a Senior Security Engineer to secure our AWS environments and guide cloud security architecture. You will own security controls, guardrails, and vulnerability remediation while partnering with Cloud Infra, Engineering, and security teams.

You’ll participate in on-call rotations, craft runbooks, and advance detection across CloudTrail/GuardDuty. Strong IAM, CSPM, and IaC security experience are essential, with multi-cloud familiarity a plus.