Senior Security Engineer, Detection & Response

The posting, as Aircall.io, Inc. wrote it

Aircall is a unicorn AI-powered communications platform transforming how teams win with customers.

For over a decade, we’ve believed voice builds the strongest business relationships. We bring voice, SMS, WhatsApp, and 250+ integrations together on one seamless workspace—so every customer conversation drives revenue, resolves issues faster, and builds trust. Our AI Voice Agents handle routine interactions while your team leads the conversations that matter most. Used by 24,000+ businesses worldwide.

We’re 600+ people from 40+ nationalities across Paris, London, Madrid, Berlin, New York, San Francisco, Seattle, Sydney, and Mexico City. We’re ambitious, product-driven, and execution-focused—built for visible impact, fast decisions, and real growth.

Come join us!

About the Role

As a Senior Security Engineer, Detection and Response you will develop, scale, and evolve Aircall's threat detection and response capabilities. You will take ownership of building detections from scratch, leading investigations, and driving the maturity of our detection program.

This is an owner-operator role. You will not be solely responding to alerts or consuming a detection platform that someone else runs, you will build and run it: the ingestion pipelines, the Terraform that defines them across sandbox, staging and production AWS accounts, the retention and cost posture, and the automation layered on top. Roughly two-thirds of the work is software and platform engineering; the remaining third is investigation, incident response and threat hunting. Expect to write production Python and Terraform every week, working alongside a product security, cloud and infrastructure security team you will partner with closely.

Our team builds the best solutions to our biggest problems, over the past year we've built our own AI SOC & IR agent, and we're applying those lessons to how we protect customer-facing AI products.

Responsibilities

• Leading direction and strategy of the DART program at Aircall
• Lead end-to-end development of detection logic: from threat modeling and hypothesis to writing, testing, simulation, tuning, and deploying detection rules and alerts across logs, telemetry, host, network, and cloud.
• Own the security data platform end to end. Operate and extend the SIEM and its ingestion pipelines, parsers, enrichment and normalization, defined as infrastructure-as-code and promoted from sandbox to production. Own its cost and capacity envelope and make the retention-versus-spend calls.
• Experiment and build unique tools at the front of the security space that solve significant security challenges.
• Expand and ship new security AI- and agent-based tooling for alert triage, investigation and detection building, including its authorization model, guardrails, evaluation harness and tracing.
• Conduct threat hunts proactively in company wide and production environments, discovering anomalies and attacker behaviors before they escalate.
• Lead incident

[…]
is not a full time red team position.

• Vulnerability management program ownership (Wiz or comparable CSPM, bug bounty triage, SLA enforcement).
• Fraud and abuse investigation in a multi-tenant SaaS product — account takeover, credential stuffing, trial and promo abuse, toll fraud.
• Open source detection tooling contributions or public speaking at security conferences

Base salary range

$180,000 — $220,000 USD

Why join us?

🚀 Key moment to join Aircall in terms of growth and opportunities

💆♀️ Our people matter, work-life balance is important at Aircall

📚 Fast-learning environment, entrepreneurial and strong team spirit

🌍 45+ Nationalities: cosmopolite & multi-cultural mindset

💶 Competitive salary package & benefits

DE&I Statement

At Aircall, we believe diversity, equity and inclusion – irrespective of origins, identity, background and orientations – are core to our journey.

We pride ourselves on promoting active inclusion within our business to foster a strong sense of belonging for all. We’re working to create a place filled with diverse people who can enrich and learn from one another. We’re committed to ensuring that everyone not only has a seat at the table but is valued and respected at it by providing equal opportunities to develop and thrive.

We will constantly challenge ourselves to make sure that we live up to our ambitions around diversity, equity and inclusion, and keep this conversation open. Above all else, we understand and acknowledge that we have work to do and much to learn.

Want to know more about candidate privacy? Find our Candidate Privacy Notice here.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.