Engineering Manager, Investigations and Incident Response

About the Role

<div class="content-intro"><p><span style="font-family: helvetica, arial, sans-serif; font-size: 12pt;">Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.</span></p></div><p><strong>The Community You Will Join:</strong></p> <p>The Threat Detection and Response team (TDR) at Airbnb is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the incident lifecycle. This is the front-line team that detects, investigates, and responds to security threats and malicious activity.</p> <p>We are seeking an Engineering Manager to lead our Investigations &amp; Incident Response team within a mature Threat Detection &amp; Response organization. This is a key role that combines incident response leadership, strategic ownership, and engineering-informed scale.</p> <p><strong>The Difference You Will Make:</strong></p> <ul> <li>You will define and execute new approaches to detecting, containing, and mitigating security threats and incidents, while driving the next stage of maturity for our investigations and response capabilities.</li> <li>You will own incident response and investigation outcomes, leading end-to-end response across identification, containment, eradication, and recovery.&nbsp;</li> <li>You’ll shape how the team operates—evolving operating models, guiding execution during incidents, and scaling through thoughtful use of automation and engineering.</li> <li>You will define and drive the strategy for a modern incident response function, ensuring high-quality investigations and that every incident leads to meaningful improvements in our detection and response capabilities.</li> <l

Key Responsibilities

• 1

  Identify, assess, and remediate security vulnerabilities across products and infrastructure.

• 2

  Conduct threat modelling, penetration testing, and security code reviews.

• 3

  Build and maintain security tooling, automation, and detection pipelines.

• 4

  Partner with engineering teams to embed security into the SDLC.

• 5

  Respond to security incidents and lead post-incident reviews.

• 6

  Develop and deliver security awareness training across the organization.

Requirements

• Bachelor's in CS, Cybersecurity, or related field.
• 3+ years of hands-on security engineering experience.
• Experience with penetration testing, threat modelling, and vulnerability management.
• Familiarity with security frameworks (SOC2, ISO 27001, NIST).
• Strong scripting skills (Python, Bash) and familiarity with cloud security.

Skills Required

How The Selection Process Works

Make Your Resume ATS-Friendly

Important Application Guidelines