Engineering Manager, Cloud & Data Security

Responsibilities

• Lead and grow a team of security engineers focused on cloud infrastructure security, data security, and identity and access controls.
• Set and drive the team's roadmap in alignment with organizational security priorities, balancing embedded partnership with high-leverage automation and paved-road investment.
• Partner with Infrastructure, Data Platform, and Application Security teams to embed security into how Airbnb builds, deploys, and operates its systems.
• Guide the team through complex architectural decisions across cloud (AWS, GCP), Kubernetes, data infrastructure, and identity systems.
• Coach engineers through career growth, technical development, and difficult moments - building a team where people stay, grow, and do their best work.
• Communicate technical direction, risk posture, and progress clearly to senior leadership and cross-functional stakeholders.
• Continuously raise the bar on the team's technical craft, operational excellence, and ways of working.

Requirements

• 9+ years of Engineering Experience, with at least 5+ years in Security Engineering or a related Infrastructure discipline, and 3+ years of People Management experience leading a team of Security Engineers.
• Proven experience leading security engineering teams working on cloud infrastructure, data security, or platform security at scale.
• Deep understanding of modern cloud security practices across AWS (or comparable), including IAM, network security, secrets management, and workload identity.
• Strong technical judgment across infrastructure security domains: Kubernetes, container security, infrastructure-as-code, and cloud-native detection and prevention controls.
• Familiarity with securing data platforms and pipelines, including access controls, encryption, and data governance patterns.
• Track record of coaching and growing security engineers, including through performance management, career development, and difficult feedback.
• Strong partnership skills: ability to work alongside infrastructure and platform teams as an embedded security partner rather than an external gatekeeper.
• Strong communication skills, including translating complex technical decisions for executive audiences and cross-functional partners.

Nice-to-Haves

• Enterprise security experience (identity, endpoint, corporate infrastructure) is a plus but not required.