Senior Security Engineer, Incident Response

2 months, 3 weeks ago
Full-time
Senior
Cybersecurity
Twilio

Twilio

Twilio is a cloud communication company that offers Communication APIs for SMS, Voice, Video, and Authentication, empowering developers to embed communication capabilities into their software applications globally.

Diversified Telecommunication Services
5K-10K
Founded 2008

Description

  • Lead and support the response to security events and incidents across Twilio’s global infrastructure, services, and applications.
  • Own the security incident lifecycle, including triage, containment, remediation, and post-incident improvements.
  • Document incidents and projects, and create runbooks and standard operating procedures.
  • Work cross-functionally with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions.
  • Improve Twilio’s security and reliability posture by driving remediation and other betterments from incidents.
  • Participate in on-call rotation and security incident root cause analyses.
  • Build and maintain strong relationships with internal customers to identify and deliver solutions.
  • Provide mentorship and support to help grow the team and enable career development at scale.
  • Help create, enhance, and automate security response processes and threat mitigation capabilities.

Requirements

  • 5+ years of security incident response experience in a production cloud environment.
  • Subject-matter expertise in security issues and technologies.
  • Ability to use AI for complex security incident response activities and high-fidelity detections.
  • Advanced knowledge of service-oriented architectures and cloud security tools and technologies.
  • Experience working across a technology stack on difficult security challenges and initiatives.
  • Experience with SIEM platforms and extending their functionality.
  • Experience with SOAR tools and automating manual security processes.
  • Experience with AWS, GCP, or another large cloud platform.
  • Excellent written and verbal communication skills.
  • Ability to influence and build effective working relationships at all levels of the organization.
  • Experience supporting AI model security and posture management, including protections against prompt injection, model evasion, and data poisoning (preferred).
  • Experience using GenAI or LLM-based security use cases to interpret alerts and reduce false positives (preferred).
  • Experience collecting intrusion artifacts and forensically sound images for malware, trojan, and source code analysis (preferred).
  • Experience integrating external vendor data and threat intelligence to identify trends and emerging risks (preferred).

Benefits

  • Remote-first work environment.
  • Competitive pay.
  • Generous time off, including paid sick time and paid personal time off.
  • Parental leave and wellness leave.
  • Healthcare/health insurance.
  • 401(k) retirement account.
  • Equity plan eligibility.
  • Corporate bonus plan eligibility.
  • Volunteer and donation support through company impact programs.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
3 hours, 19 minutes ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
3 hours, 19 minutes ago

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
4 hours, 4 minutes ago

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers