Role Overview
The Senior Security Engineer, Detection & Response role at Aircall involves developing, scaling, and evolving threat detection and response capabilities across the organization. This position is based out of the New York, San Francisco, or Seattle offices and suits a technical professional with over five years of experience who thrives in an owner-operator environment.
Key Responsibilities
Lead the end-to-end development of detection logic, covering threat modeling, rule writing, testing, simulation, tuning, and deployment across logs, telemetry, host, network, and cloud.
Operate and extend the SIEM and its ingestion pipelines, parsers, enrichment, and normalization using infrastructure-as-code from sandbox to production.
Manage the security data platform end-to-end, making retention-versus-spend calls and controlling the capacity envelope.
Build unique tools at the front of the security space, including security AI- and agent-based tooling for alert triage, investigation, and detection building.
Conduct proactive threat hunts in company-wide and production environments to discover anomalies and attacker behaviors.
Lead incident response activities by investigating, containing, remediating, performing root cause analysis, and driving post-incident reviews.
Assess the security of new product features, including AI- and LLM-backed services, and establish appropriate detections or protections.
Author and maintain detection documentation, runbooks, alert definitions, tuning guidelines, and metrics while collaborating cross-functionally with Engineering, Product, Fraud, Privacy, and Legal teams.
Participate in on-call and threat-response rotations, and take part in hiring and interview evaluations for security and infrastructure engineering candidates.
Requirements
5+ years of hands-on experience in security operations, detection engineering, incident response, threat hunting, or a related field.
Production-grade coding skills in Python and Terraform.
Deep knowledge of adversarial tactics, techniques, procedures, threat actor behavior, and the MITRE ATT&CK framework.
Proven experience building custom detections from scratch with low false-positive rates rather than only tuning commercial alerts.
Hands-on experience with SIEM, log analytics platforms, or data lake technologies such as OpenSearch, Elasticsearch, Clickhouse, Sentinel, Splunk, Datadog, AWS Athena, Azure Synapse, or Databricks.
Cloud-first experience across AWS, GCP, or Azure, including provisioning and owning production security infrastructure in AWS.
Experience in digital forensics, host-based detection, endpoint telemetry, process and network visibility, cloud observability, and security automation.
Strong communication skills, autonomy, initiative, and the ability to drive entire initiatives with minimal oversight.
Nice to Have
Experience building on or securing LLM and agent systems like Azure Foundry, Bedrock/AgentCore, LangGraph, and implementing guardrails and prompt-injection defense.
Purple or red team, application security, or production security experience.
Vulnerability management program ownership, such as CSPM usage or bug bounty triage.
Fraud and abuse investigation experience in a multi-tenant SaaS product.
Contributions to open-source detection tooling or public speaking at security conferences.
Skills and Tools
Python
Terraform
AWS, GCP, Azure
SIEM and Log Analytics Platforms
LLM and AI Security Tooling
Salary and Benefits
Base salary range of $180,000 to $220,000 USD
Opportunity to join a fast-growing unicorn platform at a key moment
Focus on work-life balance and a fast-learning entrepreneurial environment
Multicultural mindset with teams across many nationalities
Competitive salary package and benefits
About the Company
Aircall operates an AI-powered customer communications platform utilized by thousands of companies worldwide to drive revenue, resolve issues faster, and scale customer-facing teams. Headquartered in Paris with North American headquarters in Seattle and a strong presence in cities like New York and San Francisco, the company brings voice, SMS, WhatsApp, and AI together into one workspace. Aircall is ambitious, product-driven, and execution-focused, valuing ownership, continuous learning, and thoughtful speed.
How to Apply
Interested candidates should apply directly on the official Aircall careers page.
