Related skills
terraform aws cdk sast sca📋 Description
- Own SSDLC from threat modelling to production.
- Embed security reviews (SAST, SCA, secrets) in CI/CD pipelines.
- Lead Bug Bounty and Vulnerability Disclosure Program; triage/remediation.
- Drive penetration testing cycles for web/mobile/API; track remediation.
- Define security architecture of Aircall's AWS infra with zero-trust.
- Own observability and auto-remediation; IAM, secrets, certs, workload isolation.
🎯 Requirements
- 7+ years in security engineering.
- 3+ years in engineering management with direct reports.
- Proven track record building/scaling security teams in cloud-native SaaS.
- Deep fluency across at least two pillars (Product Security, Infrastructure Security, D&R, GRC).
- Hands-on with AWS (preferred); GCP/Azure a plus; IaC: Terraform or CDK.
- Experience with SOC 2 Type II and ISO 27001 or equivalent.
- Ability to communicate security risk to non-technical executives and board.
- Experience running security incident response from detection to post-mortem.
🎁 Benefits
- Medical, dental, and vision insurance 100% covered.
- 401k with company matching.
- Unlimited PTO.
- Wellness, internet, and childcare reimbursements.
- Generous parental leave policy.
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to Engineering Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!