Senior Security Engineer, Incident Response

Twilio•,

117d•$141,520 - $208,000•Remote

About The Position

Twilio’s Security Incident Response Team (SIRT) is seeking a Senior Security Engineer to lead technical responses to security events and incidents across the company’s global infrastructure, services, and applications. The role includes triage, containment, remediation, and driving post-incident improvements. The engineer partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions, strengthen threat mitigation and incident response capabilities, and automate response activities. The position also contributes to the growth of Twilio’s global, scaled security response team and program. The role is remote, but candidates cannot be hired in California, Connecticut, New Jersey, New York, Pennsylvania, or Washington. Occasional travel may be required for project or team meetings. The application is intended to remain open until September 30, subject to change based on business needs.

Requirements

At least 5 years of security incident response experience in a production cloud environment.
Subject-matter expertise in security issues and technologies.
Ability to use AI for complex security incident response activities and deliver high-fidelity detections.
Advanced knowledge of service-oriented architectures and experience with security tools and technologies suited to cloud environments.
Experience working across a technology stack on challenging security issues and initiatives.
Experience with SIEM platforms and extending their functionality.
Experience with SOAR tools and automating manual security processes.
Experience with AWS, GCP, or another large cloud platform.
Excellent written and verbal communication skills.
Ability to influence and build effective working relationships at every level of an organization.

Nice To Haves

Support implementation of controls and safeguards against AI vulnerabilities, including prompt injection, model evasion, and data poisoning.
Use GenAI and LLM-based security use cases to interpret alerts, reduce false positives, and contextualize threat data.
Collect intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
Monitor external vendor data and threat intelligence, analyze trends, and proactively defend against emerging risks.

Responsibilities

Lead and support responses to security events and incidents across Twilio’s global infrastructure, services, and applications.
Document incidents and projects, and create runbooks and standard operating procedures to share best practices across teams.
Work collaboratively across teams to understand and address challenges related to threat actors and their activity.
Drive improvements identified through security events and incidents to improve Twilio’s security and reliability posture.
Acquire new technical skills and knowledge in a fast-paced industry environment.
Own the security incident lifecycle, participate in the on-call rotation, and participate in root-cause analyses for security incidents.
Build and maintain positive relationships with internal customers to identify and facilitate solutions that increase the team’s impact.
Provide mentorship and support that enable long-term career development and team success.