Senior Security Engineer, Incident Response

See yourself at Twilio

Join the team as our next Senior Security Engineer, Incident Response on Twilio’s Security Incident Response Team (SIRT).

Who we are & why we’re hiring

Twilio powers real-time business communications and data solutions that help companies and developers worldwide build better applications and customer experiences.

Although we're headquartered in San Francisco, we have presence throughout South America, Europe, Asia and Australia. We're on a journey to becoming a globally anti-racist, anti-oppressive, anti-bias company that actively opposes racism and all forms of oppression and bias. At Twilio, we support diversity, equity & inclusion wherever we do business. We employ thousands of Twilions worldwide, and we're looking for more builders, creators, and visionaries to help fuel our growth momentum.

About the job

This position is needed to respond to all security events and incidents across Twilio’s global infrastructure, services and applications. The Security Incident Response Team (SIRT) supports Twilio’s mission of security and reliability by working across the organization to lead the response to security events and incidents across Twilio by effectively conducting triage, containment, remediation and driving post-incident betterments. 

Responsibilities

In this role, you’ll:

• Lead and support the triage, containment and remediation actions for security incidents and events by effectively partnering with engineering teams to lead enterprise-wide security response actions.
• Work to improve Twilio’s security and reliability posture by driving identified betterments from security events and incidents.
• Support large projects end-to-end that will improve Twilio’s Threat Detection and Response capabilities and initiatives.
• Engage with cross-functional partners to identify and understand security telemetry, tune false positives, and centralize data in aggregation platforms
• Understand security vulnerabilities, attacker exploit techniques, and methods for their remediation.
• Execute on the vision and develop creative innovative approaches to accelerate threat detection, responses, and remediation of security incidents

Qualifications 

Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• 5+ years of experience in Cybersecurity with a focus on incident response, security engineering, and/or intrusion detection
• Experience developing content or detection mechanisms in line with MITRE ATT&CK and STRIDE threat modeling framework
• Experience developing playbooks, runbooks, technical deep dives in complex architecture and services
• Experience analyzing security telemetry to identify root cause through log analysis and digital forensic tools
• Experience with AWS, GCP, and vendor SaaS integrations
• Experience with automation and building security tools
• Experience with Sumo Logic & Bigquery
• Schedule: ability to work non-standard, on-call rotation weekend and holiday hours 

Desired:

• Working knowledge of service-oriented architectures and software development, as well as experience with different tools and technologies fit for a cloud environment
• Experience with SaaS application security and security vulnerabilities 
• Proficiency with infrastructure as code, such as Terraform

Location 

This role will be remote but is not eligible to be hired in San Francisco, CA, Oakland, CA, San Jose, CA, or the surrounding areas

Approximately 0% travel is anticipated. 

What We Offer

There are many benefits to working at Twilio, including, in addition to competitive pay, things like generous time-off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Twilio thinks big. Do you?

We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody o