Security Engineer, Incident Response

Role overview

Join Twilio’s Security Incident Response Team (SIRT) as a Security Engineer, Incident Response. You’ll lead the technical response to security events and incidents across Twilio’s global infrastructure, services, and applications by driving triage, containment, remediation, and post-incident improvements.

Responsibilities

• Lead and support response to security events and incidents across Twilio’s global environment.
• Document incidents and projects; create runbooks and standard operating procedures (SOPs) to share knowledge.
• Collaborate with R&D Engineering and R&D Business teams to develop scalable incident response processes and technical solutions.
• Work across the org to address threats and activity from a broad range of threat actors.
• Improve Twilio’s security and reliability posture by delivering identified betterments from incidents.
• Own the security incident lifecycle and participate in on-call rotation.
• Contribute to RCAs (root cause analyses) for security incidents.
• Maintain strong relationships with internal stakeholders and mentor teammates to support long-term growth.
• Continuously acquire new security/technical skills in a fast-paced environment.

Requirements

• 3+ years of security incident response experience in a production cloud environment.
• Subject-matter expertise in security issues and related technologies.
• Ability to use AI to support comprehensive, complex incident response activities and deliver high-fidelity detections.
• Advanced knowledge of service-oriented architectures and experience with cloud-ready security tools/technologies.
• Experience working across a technology stack on complex security initiatives.
• Experience with SIEM platforms and ability to extend their functionality.
• Experience with SOAR tools and automating manual security processes.