Engineering Manager - Security Engineering

New York办公方式未标注

全职Engineering

薪资未披露

D 轮

团队 700–800 人

🛡 岗位真实性核验

Ghost Job 检测

🛡 申请链接核验有效

信号由后台自动核验生成，仅供参考；判断权在你。设计案：GHOST-JOB-P1

🎯

必备技能

AIAPIAWSAgentic AIAutomationAzureCDKCI/CDCSPMCcpa

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

💼

职位描述

<div class="content-intro">Aircall is a unicorn, AI-powered customer communications platform used by 22,000+ companies worldwide to drive revenue, resolve issues faster, and scale customer-facing teams. We’re redefining customer communications by bringing voice, SMS, WhatsApp, and AI together into one seamless workspace. Our momentum comes from a simple idea: help teams work smarter, not harder. Aircall’s AI Voice Agent automates routine calls, AI Assist streamlines post-call work, and AI Assist Pro delivers real-time guidance so people can do their best work. The result is higher revenue, faster resolutions, and teams that scale with confidence. Aircall is headquartered in Paris, our European HQ, with a strong North American presence anchored in Seattle, our North American HQ, and teams across Madrid, London, Berlin, San Francisco, New York City, Sydney, and Mexico City. We’ve built a product customers love and a business that’s scaling quickly, backed by world-class investors and driven by rapid AI innovation across multiple product lines. At Aircall, you’ll join a company in motion. We’re ambitious, product-driven, and execution-focused, with visible impact, fast decisions, and real growth.   How we work at Aircall: We’re customer-obsessed, data-driven, and focused on delivering meaningful outcomes. We value ownership, continuous learning, and thoughtful speed. If you thrive in a collaborative, fast-moving environment where trust and impact matter, you’ll feel at home here.  </div>We are looking for a seasoned Engineering Manager to lead Aircall's Security Engineering organisation. This is a high-impact leadership role spanning four pillars: Product Security, Infrastructure Security, Detection & Response, and Governance, Risk & Compliance (GRC). You will grow an established team of security engineers, set the technical direction, and partner closely with Engineering, Product, Legal, IT and Finance to embed security deeply across the company. You’ll scale the team through high impact AI engineering across all 4 pillars. You will be both a skilled people manager and a credible technical leader — someone who can roll up their sleeves when needed but who ultimately scales their impact through their team. You bring empathy, clear communication, and a bias for pragmatic security outcomes over security theatre.   <h2>Scope of Responsibility:</h2> <div>Product Security</div> <ul> <li style="font-family: 'book antiqua', palatino, serif;">Own the Secure Software Development Lifecycle (SSDLC) from threat modelling through to production deployment. Secure Agentic development practices by automating threat modeling, code reviews, internal pentesting and vulnerability remediation by building in-house security AI agents.</li> <li style="font-family: 'book antiqua', palatino, serif;">Partner with engineering to embed security reviews, static analysis (SAST), dependency scanning (SCA), and secrets detection into CI/CD pipelines.</li> <li style="font-family: 'book antiqua', palatino, serif;">Lead the Aircall Bug Bounty and Vulnerability Disclosure Program (VDP), triaging and remediating reports with engineering teams.</li> <li style="font-family: 'book antiqua', palatino, serif;">Drive regular penetration testing cycles for web, mobile, and API surfaces; oversee remediation tracking.</li> <li style="font-family: 'book antiqua', palatino, serif;">Champion a developer-centric security culture through security champions, training, and tooling that makes the secure path the easy path.</li> </ul> Infrastructure Security <ul> <li style="font-family: 'book antiqua', palatino, serif;">Define and maintain the security architecture of Aircall's cloud infrastructure (AWS), with a strong emphasis on zero-trust, least privilege, and defence in depth.</li> <li style="font-family: 'book antiqua', palatino, serif;">Own, maintain and expand security observability through CSPM, CNAPP and CWPP tools like Wiz.</li> <li style="font-family: 'book antiqua', palatino, serif;">Enable agentic auto-remediations for security vulnerabilities.</li> <li style="font-family: 'book antiqua', palatino, serif;">Own network segmentation, secrets management, certificate lifecycle, identity & access management (IAM), and workload isolation, and secure hosting of internal AI applications</li> <li style="font-family: 'book antiqua', palatino, serif;">Lead infrastructure hardening programs: CIS benchmarks, container security, Kubernetes policy enforcement (OPA), and immutable infrastructure practices.</li> <li style="font-family: 'book antiqua', palatino, serif;">Manage the security posture of third-party SaaS tools and vendor risk assessments.</li> <li style="font-family: 'book antiqua', palatino, serif;">Collaborate with Infrastructure engineering and Product Engineering on shared security responsibilities and runbooks.</li> </ul> Detection & Response <ul> <li style="font-family: 'book antiqua', palatino, serif;">Build and mature Aircall's threat detection capability — SIEM tuning, alert triage playbooks, and investigation workflows. Own incident response: develop and test the IR plan, lead tabletop exercises, and act as incident commander for significant security events.</li> <li style="font-family: 'book antiqua', palatino, serif;">Drive threat intelligence and threat hunting programs to stay ahead of adversaries targeting the cloud communications sector.</li> <li style="font-family: 'book antiqua', palatino, serif;">Establish and track key security metrics: MTTD, MTTR, alert-to-incident conversion rates, and coverage gaps.</li> <li style="font-family: 'book antiqua', palatino, serif;">Ensure 24×7 detection coverage through tooling, automation, and on-call rotations, balancing reliability and engineer wellbeing.</li> </ul> <div>Governance, Risk & Compliance (GRC / Information Security)</div> <ul> <li style="font-family: 'book antiqua', palatino, serif;">Own and continuously improve Aircall's information security management program, aligned to SOC 2 Type II, and applicable data-protection regulations (GDPR, CCPA).</li> <li style="font-family: 'book antiqua', palatino, serif;">Lead audit preparation and evidence collection for external certifications and customer security questionnaires.</li> <li style="font-family: 'book antiqua', palatino, serif;">Maintain the corporate risk register for information security, presenting findings and remediation plans to senior leadership and the board as required.</li> <li style="font-family: 'book antiqua', palatino, serif;">Define and enforce security policies, standards, and exception processes across the organisation.</li> <li style="font-family: 'book antiqua', palatino, serif;">Act as the primary security liaison for enterprise customers, prospects, and partners conducting security due diligence.</li> </ul> People Leadership <ul> <li style="font-family: 'book antiqua', palatino, serif;">Lead, mentor, and grow a multi-disciplinary security team of 6–10 engineers across the four pillars.</li> <li style="font-family: 'book antiqua', palatino, serif;">Run structured 1:1s, career-development conversations, and quarterly goal-setting aligned to company OKRs.</li> <li style="font-family: 'book antiqua', palatino, serif;">Hire and onboard exceptional security talent; contribute to employer-branding initiatives in the security community.</li> <li style="font-family: 'book antiqua', palatino, serif;">Create an environment where engineers feel psychologically safe to raise concerns, experiment, and learn from failures.</li> <li style="font-family: 'book antiqua', palatino, serif;">Balance hands-on technical involvement with delegation — staying close enough to the work to be credible, but trusting the team to execute.</li> <li style="font-family: 'book antiqua', palatino, serif;">Partner cross-functionally with Engineering leadership, Legal, People Ops, and Finance to align security initiatives with business priorities.</li> </ul>   <h2>What We're Looking For:</h2> <ul> <li style="font-family: 'book antiqua', palatino, serif;">7+ years of professional experience in security engineering.</li> <li style="font-family: 'book antiqua', palatino, serif;">3+ years in an engineering management or technical lead role with direct reports.</li> <li style="font-family: 'book antiqua', palatino, serif;">Proven track record of building and scaling security teams in a cloud-native, SaaS environment.</li> <li style="font-family: 'book antiqua', palatino, serif;">Deep technical fluency across at least two of the four pillars (Product Security, Infrastructure Security, D&R, GRC).</li> <li style="font-family: 'book antiqua', palatino, serif;">Hands-on experience with major cloud platforms (AWS strongly preferred, GCP or Azure a plus) and infrastructure-as-code (Terraform, CDK, or equivalent).</li> <li style="font-family: 'book antiqua', palatino, serif;">Experience owning or contributing to SOC 2 Type II, ISO 27001, or equivalent compliance programmes.</li> <li style="font-family: 'book antiqua', palatino, serif;">Demonstrated ability to communicate security risk clearly to non-technical executives and board members.</li> <li style="font-family: 'book antiqua', palatino, serif;">Experience running security incident response — from detection through containment, eradication, and post-mortem.</li> </ul>   <h2>Preferred / Nice to Have:</h2> <ul> <li style="font-family: 'book antiqua', palatino, serif;">Background in a high-growth B2B SaaS or cloud-communications company.</li> <li style="font-family: 'book antiqua', palatino, serif;">Familiarity with VoIP, real-time communications, or telephony security considerations.</li> <li style="font-family: 'book antiqua', palatino, serif;">Experience embedding Agentic AI practices into security engineering workflows and securing internal AI tooling and implementation.</li> <li style="font-family: 'book antiqua', palatino, serif;">Relevant certifications: CISSP, CISM, AWS Security Specialty, GIAC (GWAPT, GCIA, GCIH), or equivalent.</li> <li style="font-family: 'book antiqua', palatino, serif;">Experience running a Bug Bounty programme (HackerOne, Bugcrowd, or similar).</li> <li style="font-family: 'book antiqua', palatino, serif;">Contributions to the open-source security community, conference speaking, or published research.</li> <li style="font-family: 'book antiqua', palatino, serif;">Familiarity with DORA metrics and the relationship between deployment frequency and security posture.</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="title">Base salary range:</div><div class="pay-range">$200,000—$260,000 USD</div></div></div><div class="content-conclusion"><div data-qa="closing-description"> Why join us? 🚀 Key moment to join Aircall in terms of growth and opportunities 💆‍♀️ Our people matter, work-life balance is important at Aircall 📚 Fast-learning environment, entrepreneurial and strong team spirit 🌍 45+ Nationalities: cosmopolite & multi-cultural mindset 💶 Competitive salary package & benefits   DE&I Statement:  At Aircall, we believe diversity, equity and inclusion – irrespective of origins, identity, background and orientations – are core to our journey.  We pride ourselves on promoting active inclusion within our business to foster a strong sense of belonging for all. We’re working to create a place filled with diverse people who can enrich and learn from one another. We’re committed to ensuring that everyone not only has a seat at the table but is valued and respected at it by providing equal opportunities to develop and thrive.   We will constantly challenge ourselves to make sure that we live up to our ambitions around diversity, equity and inclusion, and keep this conversation open. Above all else, we understand and acknowledge that we have work to do and much to learn.   Want to know more about candidate privacy? Find our <a href="https://aircall.io/candidate-privacy-notice/">Candidate Privacy Notice here.</a> </div> <div data-qa="ai-disclaimer"> We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. </div></div>

🈯 翻译这份 JD · 红灯 0 / 黄灯 1 / 绿灯 1点开 ▾

可以投——没有红灯，黄灯问题放进面试清单问清即可。

competitive salary → 形容词，不是数字要问的问题：这个岗位的预算范围是多少？

plus → 加分项，不是门槛

词典只标"常见信号"，不对公司下结论——红灯 = 面试里该当面确认的问题。想自己翻别的 JD：JD 翻译器 →

🏢

公司 · Company

Aircall

Aircall provides a cloud-based phone system and call center software that integrates seamlessly with CRMs and helpdesk tools like Salesforce, HubSpot, and Zende

New York团队 700–800 人D 轮来源：雇主官网

⚑ 岗位信息收录自公开招聘页（雇主官网），以雇主官网为准