Engineering Manager – Security Engineering

Aircall

Engineering Manager leading Security Engineering team at Aircall, a unicorn AI-powered customer communications platform. Overseeing Product Security, Infrastructure Security, Detection & Response, and Governance, Risk & Compliance.

Posted 5/1/2026full-timeSeattle • Washington • 🇺🇸 United StatesSeniorLead💰 $200,000 - $260,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformTerraform

About the role

Key responsibilities & impact

Own the Secure Software Development Lifecycle (SSDLC) from threat modelling through to production deployment.
Partner with engineering to embed security reviews, static analysis (SAST), dependency scanning (SCA), and secrets detection into CI/CD pipelines.
Lead the Aircall Bug Bounty and Vulnerability Disclosure Program (VDP), triaging and remediating reports with engineering teams.
Drive regular penetration testing cycles for web, mobile, and API surfaces; oversee remediation tracking.
Champion a developer-centric security culture through security champions, training, and tooling that makes the secure path the easy path.
Define and maintain the security architecture of Aircall's cloud infrastructure (AWS).
Build and mature Aircall's threat detection capability — SIEM tuning, alert triage playbooks, and investigation workflows.
Own and continuously improve Aircall's information security management program, aligned to SOC 2 Type II, and applicable data-protection regulations (GDPR, CCPA).

Requirements

What you’ll need

7+ years of professional experience in security engineering.
3+ years in an engineering management or technical lead role with direct reports.
Proven track record of building and scaling security teams in a cloud-native, SaaS environment.
Deep technical fluency across at least two of the four pillars (Product Security, Infrastructure Security, D&R, GRC).
Hands-on experience with major cloud platforms (AWS strongly preferred, GCP or Azure a plus) and infrastructure-as-code (Terraform, CDK, or equivalent).
Experience owning or contributing to SOC 2 Type II, ISO 27001, or equivalent compliance programmes.
Demonstrated ability to communicate security risk clearly to non-technical executives and board members.
Experience running security incident response — from detection through containment, eradication, and post-mortem.

Benefits

Comp & perks

Medical, dental, and vision insurance is 100% covered
401k plan with company matching!
Unlimited PTO — take the time you need to come to work feeling great!
Wellness, internet, and childcare reimbursements
Generous parental leave policy

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Secure Software Development Lifecycle (SSDLC)static analysis (SAST)dependency scanning (SCA)penetration testingthreat detectioninfrastructure-as-code (Terraform, CDK)cloud-native securitysecurity incident responsesecurity architecturevulnerability management

Soft Skills

leadershipcommunicationteam buildingtrainingcollaborationproblem-solvingrisk assessmentstrategic thinkingmentoringadvocacy

Certifications

SOC 2 Type IIISO 27001