Security Operations Analyst

Hey you \uD83D\uDC4B Want to work for one of the fastest growing SaaS companies in the world? \uD83D\uDCC8

We’re building the next generation of learning software that companies like AWS, Netflix, Opentable and L’Oreal rely on to deliver training \uD83D\uDCBB We believe learning is for everyone, and that we all have something we can learn from each other. We rely on one another to continuously innovate our products and processes to create an exceptional experience for our employees, customers and partners.

Still not sure? We are a culture where values are at the center of everything we do. We also embody what we call the **Docebo Heart**. We trust our teammates, assume the best of one another, and also hold space for all the differences that make us better. \uD83D\uDC99

Are you ready to be a part of the learning revolution? \uD83D\uDE80

**About This Opportunity**:
Docebo, the industry leader in cloud-based LMS, is looking for a skilled and highly motivated Security Engineer specializing in Security Incident Response to join our global Information Security team.

You will play a crucial role in identifying, containing, and mitigating cyber threats and incidents to ensure the security and integrity of Docebo's systems and data. You will be responsible for coordinating incident response activities and implementing strategies to improve incident detection and response capabilities.

You will work closely with different teams to validate, investigate, and respond to threats while continuously improving the overall incident response plan.

You will focus on automating all the phases of incident handling to timely thwart threats, reduce human error, and improve overall efficiency.

**Reports To**:Security Operations Manager

**Location**: Biassono or Milan, Italy (Hybrid)

**Responsibilities**:

- Manage and operate the installation and monitoring of security measures and tools to protect systems and information.
- Leverage SIEM solutions for security events identification and incident investigation.
- Respond to security incidents and conduct investigations, including documenting findings, analyzing root causes, and recommending corrective actions.
- Collaborate with different teams across the organization to validate, investigate, and respond to threats.
- Provide suggestions to improve detection capabilities, minimize false positives, and reduce manual investigation efforts.
- Partner with different business teams to identify, scope, create, and maintain scenario-based incident response playbooks.
- Analyze signals and logs across our diverse environments to detect potential adversarial techniques against our infrastructure.
- Define, create, and tune detection rules to detect malicious or unauthorized activity.
- Leverage automation tools to promptly address cyber threats and decrease time to remediation.
- Maintain documentation and data of past incidents to measure the effectiveness of the incident response plan.
- Keep updated on the latest trends, tools, and techniques in incident response and cyber security.
- Other duties related to Information and Cyber Security as may be assigned or requested.

**Requirements**:

- Fluent in English and effective communication skills.
- Good knowledge of cloud architecture.
- Experience in incident handling and response.
- Experience with SIEM tools.
- Strong knowledge of information security principles and best practices.
- Experience in defending against threats on hybrid networks.
- Experience with code scripting (e.g. Python, Bash) and security automation tools.
- Experience in using and interpreting cyber security frameworks (e.g. MITRE ATT&CK, NIST SP 800-53, CIS, PCI, SOC 2, ISO 27001).

**Nice to have**:

- Security-related certification, such as from ISC2, ISACA, SANS, or CompTIA.
- AWS certifications.
- Experience with Cloud Security tools (CSPM, CWPP, CIEM, CNAPP, IaC).
- Experience in operationalizing the MITRE ATT&CK framework.
- Familiarity with Okta IAM.
- Knowledge of CIS Controls.
- Familiarity with DevSecOps practices.
- FedRAMP program knowledge.

LI-Hybrid

**Benefits & Perks** \uD83D\uDE0D
- Generous Vacation Policy, plus 2 extra floating holidays to use for religious or cultural events that matter to you
- Employee Share Purchase Plan
- Career progression/internal mobility opportunities
- Four employee resource groups to get involved with (the Docebo Women's Alliance, PRIDE, BIDOC, and Green Ambassadors)
- WeWork partnership and “Work from Anywhere” program

**Hybrid Office Model \uD83C\uDFE2**

**About Docebo** \uD83D\uDC99

Here at Docebo, we power learning experiences for over 3000 customers around the world with our easy-to-use, AI-powered Suite designed to close the enterprise learning loop. We have successfully achieved 2 IPOs (TSX: DCBO & NASDAQ: DCBO), been recognized as a Top SaaS e-learning Solution, and are growing exponentially in the process.