Engineering Manager - Security Engineering

• Define and maintain the security architecture of Aircall's cloud infrastructure (AWS), with a strong emphasis on zero-trust, least privilege, and defence in depth.
• Own, maintain and expand security observability through CSPM, CNAPP and CWPP tools like Wiz.
• Enable agentic auto-remediations for security vulnerabilities.
• Own network segmentation, secrets management, certificate lifecycle, identity & access management (IAM), and workload isolation, and secure hosting of internal AI applications
• Lead infrastructure hardening programs: CIS benchmarks, container security, Kubernetes policy enforcement (OPA), and immutable infrastructure practices.
• Manage the security posture of third-party SaaS tools and vendor risk assessments.
• Collaborate with Infrastructure engineering and Product Engineering on shared security responsibilities and runbooks.

• Build and mature Aircall's threat detection capability — SIEM tuning, alert triage playbooks, and investigation workflows. Own incident response: develop and test the IR plan, lead tabletop exercises, and act as incident commander for significant security events.
• Drive threat intelligence and threat hunting programs to stay ahead of adversaries targeting the cloud communications sector.
• Establish and track key security metrics: MTTD, MTTR, alert-to-incident conversion rates, and coverage gaps.
• Ensure 24×7 detection coverage through tooling, automation, and on-call rotations, balancing reliability and engineer wellbeing.
• Own and continuously improve Aircall's information security management program, aligned to SOC 2 Type II, and applicable data-protection regulations (GDPR, CCPA).
• Lead audit preparation and evidence collection for external certifications and customer security questionnaires.
• Maintain the corporate risk register for information security, presenting findings and remediation plans to senior leadership and the board as required.
• Define and enforce security policies, standards, and exception processes across the organisation.
• Act as the primary security liaison for enterprise customers, prospects, and partners conducting security due diligence.

• Lead, mentor, and grow a multi-disciplinary security team of 6–10 engineers across the four pillars.
• Run structured 1:1s, career-development conversations, and quarterly goal-setting aligned to company OKRs.
• Hire and onboard exceptional security talent; contribute to employer-branding initiatives in the security community.
• Create an environment where engineers feel psychologically safe to raise concerns, experiment, and learn from failures.
• Balance hands-on technical involvement with delegation — staying close enough to the work to be credible, but trusting the team to execute.
• Partner cross-functionally with Engineering leadership, Legal, People Ops, and Finance to align security initiatives with business priorities.

• 7+ years of professional experience in security engineering.
• 3+ years in an engineering management or technical lead role with direct reports.
• Proven track record of building and scaling security teams in a cloud-native, SaaS environment.
• Deep technical fluency across at least two of the four pillars (Product Security, Infrastructure Security, D&R, GRC).
• Hands-on experience with major cloud platforms (AWS strongly preferred, GCP or Azure a plus) and infrastructure-as-code (Terraform, CDK, or equivalent).
• Experience owning or contributing to SOC 2 Type II, ISO 27001, or equivalent compliance programmes.
• Demonstrated ability to communicate security risk clearly to non-technical executives and board members.
• Experience running security incident response — from detection through containment, eradication, and post-mortem.

• Background in a high-growth B2B SaaS or cloud-communications company.
• Familiarity with VoIP, real-time communications, or telephony security considerations.
• Experience embedding Agentic AI practices into security engineering workflows and securing internal AI tooling and implementation.
• Relevant certifications: CISSP, CISM, AWS Security Specialty, GIAC (GWAPT, GCIA, GCIH), or equivalent.
• Experience running a Bug Bounty programme (HackerOne, Bugcrowd, or similar).
• Contributions to the open-source security community, conference speaking, or published research.
• Familiarity with DORA metrics and the relationship between deployment frequency and security posture.

us?

🚀 Key moment to join Aircall in terms of growth and opportunities

💆‍♀️ Our people matter, work-life balance is important at Aircall

📚 Fast-learning environment, entrepreneurial and strong team spirit

🌍 45+ Nationalities: cosmopolite & multi-cultural mindset

💶 Competitive salary package & benefits

At Aircall, we believe diversity, equity and inclusion – irrespective of origins, identity, background and orientations – are core to our journey.

We pride ourselves on promoting active inclusion within our business to foster a strong sense of belonging for all.

We’re working to create a place filled with diverse people who can enrich and learn from one another.

We’re committed to ensuring that everyone not only has a seat at the table but is valued and respected at it by providing equal opportunities to develop and thrive.

We will constantly challenge ourselves to make sure that we live up to our ambitions around diversity, equity and inclusion, and keep this conversation open.

Above all else, we understand and acknowledge that we have work to do and much to learn.

Want to know more about candidate privacy?

Find our Candidate Privacy Notice here.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses.

These tools assist our recruitment team but do not replace human judgment.

Final hiring decisions are ultimately made by humans.

If you would like more information about how your data is processed, please contact us.