Engineering Manager, Security & Cloud Infrastructure

Aircall; Bellevue (WA); On-site; USD 200,000 - 260,000; Full time

Benefits offered by this job

Competitive salary & benefits

Growth opportunities

Diverse, multinational team

Job summary

Aircall is seeking a Security Engineering Leader to own the SSDLC, drive threat modelling, and lead security initiatives across cloud security, detection, and governance. You will mentor a multi-disciplinary team of engineers and collaborate with cross-functional partners to secure our SaaS platform.

Ideal candidates bring 7+ years in security engineering, 3+ years in tech lead roles, and hands-on AWS + IaC experience, with a proven track record in SOC 2 and ISO 27001 compliance.

Qualifications

• 7+ years of professional experience in security engineering.
• 3+ years in an engineering management or technical lead role with direct reports.
• Experience building and scaling security teams in a cloud-native SaaS environment.
• Deep fluency in at least two security pillars (Product Security, Infrastructure Security, D&R, or GRC).
• Hands-on experience with major cloud platforms (AWS strongly preferred).
• Experience owning or contributing to SOC 2 Type II, ISO 27001, or equivalent programmes.
• Ability to communicate security risk clearly to non-technical executives and board members.
• Experience running security incident response — from detection through containment, eradication, and post-mortem.

Responsibilities

• Own the Secure Software Development Lifecycle (SSDLC) from threat modelling through to production deployment and automation of security reviews.
• Embed security reviews, static analysis (SAST), dependency scanning (SCA), and secrets detection into CI/CD pipelines.
• Lead the Bug Bounty and Vulnerability Disclosure Program; triage and remediate reports with engineering teams.
• Drive regular penetration testing cycles for web, mobile, and API surfaces; oversee remediation tracking.
• Champion a developer-centric security culture with security champions, training, and tooling.
• Define and maintain the security architecture of Aircall's cloud infrastructure (AWS).
• Own security observability through CSPM, CNAPP and CWPP tools.
• Enable agentic auto-remediations for security vulnerabilities.
• Lead infrastructure hardening programs: CIS benchmarks, container security, Kubernetes policy enforcement (OPA).
• Collaborate on shared security responsibilities and runbooks with other teams.
• Build and mature Aircall's threat detection capability; incident response planning and drills.
• Establish security metrics (MTTD, MTTR, alert-to-incident rates).
• Ensure 24×7 detection coverage through tooling and on-call rotations.
• Own and improve information security governance aligned to SOC 2 Type II and data protection regulations.

Skills

Security engineering

Engineering management

Cloud platforms (AWS)

Security incident response

Executive communication

Tools

Terraform

CDK

Job description

Aircall is seeking a Security Engineering Leader to own the SSDLC, drive threat modelling, and lead security initiatives across cloud security, detection, and governance. You will mentor a multi-disciplinary team of engineers and collaborate with cross-functional partners to secure our SaaS platform.

Ideal candidates bring 7+ years in security engineering, 3+ years in tech lead roles, and hands-on AWS + IaC experience, with a proven track record in SOC 2 and ISO 27001 compliance.