Security Engineer - Product Security at aircall

aircall

London Office·20h ago

Mid LevelFull-timeJavaScriptTypeScriptPythonJavaRustAWSGCPAzureKubernetesMicroservices

Salary Range

$102,000 - $138,000 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for a Security Engineer, Product Security to join Aircall and help build and ship secure products. You will work closely with engineering teams and product managers to identify risk early, reduce vulnerabilities, and improve security quality across the software development lifecycle.

Key Responsibilities

→Partner with engineering teams to review designs and implementation plans, identifying security risks early and recommending mitigations
→Perform threat modelling for new features and major changes
→Identify and help remediate common vulnerability classes across services and APIs
→Triage and support remediation of vulnerabilities identified through SAST/DAST tools
→Conduct security testing and validation, including targeted manual testing for high-risk areas
→Help improve secure development practices by creating reusable guidance, checklists, and secure patterns
→Contribute to security tooling and automation that improves coverage and streamlines security reviews
→Assist with product security incidents by supporting investigation and remediation
→Communicate security risks clearly and pragmatically
→Document learnings and contribute to evolving product security processes

Requirements

✓2–5 years of experience in Product Security, Application Security, or software engineering with a strong security focus
✓Strong understanding of web application and API security fundamentals and common vulnerability classes
✓Experience performing security reviews, threat modelling, or secure architecture assessments
✓Familiarity with security testing tools and practices (SAST/DAST, dependency scanning, fuzzing, manual testing)
✓Comfort reading and reviewing production code in at least one language
✓Exposure to automated or AI-assisted security tools or workflows
✓Ability to work cross-functionally with engineering teams and communicate findings constructively
✓Proven ability to drive remediation efforts and follow through on risk reduction outcomes