O wakacie
Aircall is hiring a Staff Security Engineer focused on Product Security in San Francisco or Seattle. The role leads secure-by-design practices, security architecture, threat modeling, vulnerability remediation, security automation, and product security incident response.
Responsibilities
- Drive and scale secure-by-design practices across product and engineering teams.
- Lead security design and architecture reviews for major product initiatives.
- Own and evolve threat modeling practices.
- Perform manual code reviews, targeted security testing, and validation of fixes.
- Identify and reduce vulnerabilities across codebases and services, including authentication and authorization flaws, injection, logic issues, SSRF, API security issues, and cloud misconfigurations.
- Build and improve security tooling and automation, including guardrails, CI checks, policy-as-code, and AI-assisted security review processes.
- Triage and drive remediation of vulnerabilities from internal testing, automated detection, and external reports.
- Investigate and respond to product security incidents, including containment, root cause analysis, and prevention.
- Participate in on-call and threat-response rotations.
- Track attacker techniques, MITRE ATT&CK, red team reports, and threat intelligence to propose detection patterns and responses.
- Advise engineering and product leadership on security risks and prioritized actions.
- Lead cross-team product security initiatives such as secure SDLC improvements, security design frameworks, security champions, and organization-wide security standards.
- Mentor engineers across security and product teams.
Conditions
Hybrid work format.
Location: San Francisco or Seattle.
Salary: $215,000–$265,000 per year.