Artificial Intelligence. Actual Impact.
At Docebo, AI isn’t just a buzzword — it’s how we help teams move faster, perform better, and focus on the work that actually matters. Our learning platform is built with smart, time-saving tools that personalize training, cut the busywork, and make learning feel like less of a chore (and more of a superpower).

We’re building the future of learning, and we’re doing it with a team that loves to challenge the status quo. If you’re excited by the idea of using AI to make work‑life better for real people — not just in theory — you’re in the right place.

About This Prospect

The Senior Security Engineer will play a major role in safeguarding Docebo’s infrastructure, data security, and integrity, particularly within cloud environments. Working closely with Cloud Infrastructure & Operations teams, IT, Developers, and other Security teams, the Security Engineer will design, implement, and maintain security measures and tools to protect systems and information. They will advocate for and support adopting best practices to safeguard company assets while ensuring an optimal user experience for our internal users. They will monitor and respond to threats against Docebo’s systems and users, lead the incident response process, drive improvements to incident handling, and leverage automation and AI to enhance speed, accuracy, and resilience in security operations. They will also collaborate with the GRC team to meet regulatory and compliance requirements.

Reports to: Security Operations Manager

To help our teams work together effectively, this role requires you to be located in the Toronto area.

Responsibilities

- Security Measures and Tools Management: guide and deliver the installation,



configuration, and management of security tools for safeguarding systems and data. Continuously monitor and adjust security measures for optimal protection.
- Cloud Security Solutions: collaborate with Cloud Infrastructure & Operations teams to design and maintain robust security solutions for cloud environments, define strategy, update solutions, and oversee optimal account structure.
- Endpoint and Email Security Management: deploy and manage security measures on endpoints and email systems to prevent unauthorized access and threats.
- Incident Response and Analysis: coordinate and lead the investigation of security incidents to determine causes, impacts, and potential exposure of sensitive data (e.g. PII, credentials). Perform RCA to prevent recurrence, leveraging automation, AI, and threat intelligence; take responsibility for following up with internal and external parties.
- Access Control and Identity Management: define and enforce RBAC policies; oversee and manage IAM solutions for secure authentication and authorization.
- Vulnerability Management: identify and prioritize vulnerabilities in systems and applications; oversee and deliver remediation efforts.
- SIEM and Detection Engineering: use SIEM tools to monitor and analyze security events and logs, develop detection rules, testing and tuning.




- Development of Security Best Practices: develop and document best practices, policies, and procedures for information security; provide guidance and training.
- Monitoring of Security Configurations: audit and assess security configurations across IT and Cloud infrastructure; implement automated tools and processes for enforcement.
- Vendor relationships: maintain relationships with security vendors for technical issues, ensure smooth operations of security tools and services, and accelerate problems or incidents to vendors when required.

Requirements

- 5+ years of relevant work experience in cybersecurity, with strong exposure to incident response, SOC operations, or IR consulting.
- Solid experience with cloud platforms (AWS preferred; Azure/GCP a plus) and familiarity with cloud security tools (CSPM, CWPP, CIEM, CNAPP).
- Proven experience with incident lifecycle management, including investigation, containment, remediation, and post‑incident analysis.
- Experience with SIEM and EDR platforms, including threat hunting, log investigation, and detection engineering.
- Familiarity with automation platforms and AI‑driven security tools.
- Strong ability to work with large volumes of security and application data, extracting and correlating events to assess impact on sensitive information.
- Experience with threat intelligence feeds, platforms, and enrichment tools.
- Familiarity with IAM, endpoint protection, and modern security architectures.
- Experience with IaC and scripting (Python, Bash, PowerShell, etc.) to develop custom workflows.
- In-depth knowledge of information security principles, best practices, and cybersecurity frame

📌 Senior Security Engineer (Toronto)
🏢 Docebo
📍 Toronto