Senior Security Engineer, Incident Response

Twilio

1d•$141,520 - $208,000•Remote

About The Position

Twilio is seeking a Senior Security Engineer to join its Security Incident Response Team (SIRT). The role leads technical responses to security events and incidents across Twilio’s global infrastructure, services, and applications, including triage, containment, remediation, and post-incident improvements. The engineer partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions, strengthen threat mitigation and incident response capabilities, and automate security processes. The position is remote and may require occasional travel for in-person project or team meetings. It is not eligible for hiring in California, Connecticut, New Jersey, New York, Pennsylvania, or Washington.

Requirements

At least 5 years of security incident response experience in a production-cloud environment.
Subject-matter expertise in security issues and technologies.
Ability to use AI for comprehensive, complex security incident response activities and deliver high-fidelity detections.
Advanced knowledge of service-oriented architectures and experience with security tools and technologies suited to cloud environments.
Experience working across a technology stack on difficult security challenges and initiatives.
Experience with SIEM platforms and the ability to extend their functionality.
Experience with SOAR tools and automating manual security processes.
Experience with AWS, GCP, or another large cloud platform.
Excellent written and verbal communication skills.
Ability to influence and build effective working relationships at every level of the organization.

Nice To Haves

Experience supporting implementation of controls and safeguards against AI vulnerabilities such as prompt injections, model evasion, and data poisoning.
Experience using generative AI and LLM-based security applications to interpret alerts, reduce false positives, and contextualize threat data.
Experience collecting intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
Experience monitoring external vendor data and threat intelligence to identify trends and proactively defend against emerging risks.

Responsibilities

Lead and support responses to security events and incidents across Twilio’s global infrastructure, services, and applications.
Document incidents and projects, and create runbooks and standard operating procedures to share best practices across teams.
Collaborate across teams to understand and address challenges involving a broad spectrum of threat actors and activity.
Drive improvements identified through security events and incidents to strengthen Twilio’s security and reliability posture.
Acquire new technical skills and knowledge in a fast-paced industry environment.
Own the security incident lifecycle, respond to incidents, participate in the on-call rotation, and participate in root-cause analyses for security incidents.
Build and maintain positive relationships with internal customers to identify and facilitate solutions that increase the team’s impact.
Provide mentorship and support that enables team members’ long-term career development, happiness, and success.
Support implementation of controls and safeguards against AI vulnerabilities, including prompt injections, model evasion, and data poisoning.
Use generative AI and LLM-based security applications to interpret alerts, reduce false positives, and contextualize threat data.
Collect intrusion artifacts and forensically sound images to analyze malware, trojans, and source code.
Monitor external vendor data and threat intelligence to analyze trends and proactively defend against emerging risks.