[Remote] Engineering Manager, Investigations and Incident Response

Note: The job is a remote job and is open to candidates in USA. Airbnb is a global company that connects hosts and guests through unique stays and experiences. They are seeking an Engineering Manager to lead the Investigations & Incident Response team, focusing on automating security detection and responding to incidents while driving the maturity of their response capabilities.ResponsibilitiesYou will define and execute new approaches to detecting, containing, and mitigating security threats and incidents, while driving the next stage of maturity for our investigations and response capabilitiesYou will own incident response and investigation outcomes, leading end-to-end response across identification, containment, eradication, and recoveryYou’ll shape how the team operates—evolving operating models, guiding execution during incidents, and scaling through thoughtful use of automation and engineeringYou will define and drive the strategy for a modern incident response function, ensuring high-quality investigations and that every incident leads to meaningful improvements in our detection and response capabilitiesYou’ll assess current capabilities and chart the path forward across people, process, and technology, evolving the operating model to support effective global responseYou will scale the function through automation, tooling, and improved workflows—solving repeatable problems with systems, not manual effortYou will serve as a key voice to senior leadership, communicating incident trends, risks, and strategic direction, and partner across the company to turn incident learnings into durable security improvements resulting in removal of entire classes of problemsLead and mentor a diverse team of ~5+ senior engineersPartner with Security Platform and Detection Engineering teams to enhance telemetry, context, and response capabilities, and collaborate closely with key teams in Infrastructure Security, Application Security, Infrastructure teams, Legal, Privacy, Global Safety and Security, and Engineering teams across the organizationCoach and develop team members, help them grow their careers, technical expertise, and collaboration skillsAct as a senior escalation point during high-severity or complex incidentsEnsure consistent, high-quality investigations with strong root cause analysisEstablish clear priorities that balance speed, depth, and risk reductionImprove escalation paths, ownership clarity, and cross-functional coordinationUse incident data to influence security priorities and investment decisionsPartner closely with partner teams within Information Security to ensure incident learnings are shared and added to roadmaps for security risk reductionWork with infrastructure, product, and engineering teams to drive effective remediationDefine and track key metrics such as MTTD, MTTR, incident severity, and recurrenceEnsure clear communication during incidents to senior and executive leadership including updates on insights from incident patterns, trends, and emerging risksSkills9+ years of industry experience in threat detection and incident response, with a minimum of 3-5 years in engineering managementExperience shaping or evolving incident response programs in complex environmentsExceptional people management and mentorship skills, with a history of recruiting, developing and retaining top talentStrong understanding of attacker behavior and frameworks such as MITRE ATT&CKExperience and understanding of technologies such as EDR, SIEM, cloud environments, and investigation workflowsExperience in cloud-native environments (AWS, GCP, Azure)Ability to analyze ambiguous situations and make sound, timely decisionsComfort partnering with engineering teams to build scalable solutionsAbility to operate at both strategic and tactical levels, from executive communication to incident leadershipExperience defining team strategy, priorities, and operating modelsStrong judgment in risk assessment, escalation, and trade-offsExcellent communication skills across technical and executive audiencesBenefitsBonusEquityBenefitsEmployee Travel CreditsCompany OverviewAirbnb is an online community marketplace for people to list, discover, and book accommodations through mobile phones or the Internet. It was founded in 2008, and is headquartered in San Francisco, California, USA, with a workforce of 5001-10000 employees. Its website is https://www.airbnb.com.Company H1B SponsorshipAirbnb has a track record of offering H1B sponsorships, with 27 in 2026, 234 in 2025, 176 in 2024, 160 in 2023, 270 in 2022, 250 in 2021, 274 in 2020. Please note that this does not guarantee sponsorship for this specific role.