Senior Security Engineer, Incident Response

About the role

Twilio is seeking a seasoned security professional to join our Security Incident Response Team. In this role, you will be instrumental in safeguarding Twilio's global operations by leading technical responses to security events. You will collaborate with engineering and business teams to enhance our security posture and develop scalable solutions.

Key facts

What you'll do

• Take charge of responding to and managing security incidents across Twilio's infrastructure, services, and applications.
• Document incident details and develop best practices in the form of runbooks and standard operating procedures.
• Work with various teams to understand and address security challenges posed by diverse threat actors.
• Drive improvements to Twilio's security and reliability by implementing lessons learned from security events.
• Continuously acquire new technical skills in a dynamic industry.
• Manage the full lifecycle of security incidents, including participation in on-call rotations and post-incident reviews.
• Build and maintain strong relationships with internal stakeholders to facilitate security solutions.
• Mentor and support team members to foster their career development and success.

Requirements

• A minimum of 5 years of experience in security incident response within a cloud production environment.
• Demonstrated expertise in security issues and related technologies.
• Proficiency in using AI for comprehensive and complex security incident response activities, including generating high-fidelity detections.
• Advanced understanding of service-oriented architectures and cloud-native security tools.
• Experience addressing complex security challenges across a technology stack.
• Hands-on experience with SIEM platforms and extending their capabilities.
• Experience with SOAR tools and automating security processes.
• Practical experience with AWS, GCP, or another major cloud platform.
• Strong written and verbal communication abilities.
• The capacity to influence and build effective working relationships across all organizational levels.

Nice to have

• Experience with AI model security and posture management, including implementing controls for AI vulnerabilities like prompt injection and data poisoning.
• Ability to use generative AI and LLM-based security use cases for alert interpretation, false positive reduction, and threat data contextualization.
• Experience collecting intrusion artifacts and performing forensic analysis of malware and source code.
• Familiarity with integrating threat intelligence from external vendors to proactively identify and defend against emerging risks.

Skills & tools

• SIEM platforms
• SOAR tools
• AWS or GCP

Practical notes

• Occasional travel may be required for project or team meetings.
• Compensation ranges vary by
• Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont, or Washington D.C.: $141,520.00 - $176,900.00
• New York, New Jersey, Washington State, or California (outside San Francisco Bay Area): $149,840.00 - $187,300.00
• San Francisco Bay Area, California: $166,400.00 - $208,000.00
• This role may be eligible for equity and a corporate bonus.
• Standard benefits include health insurance, 401(k), paid sick time, paid personal time off, and paid parental leave.
• Application deadline: August 30th (subject to change).

About the company

Twilio Inc. is a cloud communications business headquartered in San Francisco, California. The organization creates programmable tools that allow applications to handle voice calls and text messages. Developers use these web service application programming interfaces to build customized contact methods directly into software. Through these digital connections, systems can send outgoing SMS alerts, receive incoming texts, place phone calls, and accept incoming voice communications. Cloud infrastructure replaces traditional telecommunication hardware with internet-based services. Businesses depend on these digital networks to interact with clients, send account notifications, and manage service operations. Software applications require flexible tools to handle these interactions across different regions. Developers build workflows that automate routine outreach and streamline live phone conversations. As corporate communication shifts online, web-based tools help bridge the gap between software platforms and standard telephone networks. Teams working in this space focus on creating stable software connections, supporting developer communities, and keeping message flows active. Joining an American tech firm in this sector means contributing to software that connects people through everyday phone and text technology. Employees help maintain the underlying digital framework that allows modern software programs to transmit audio calls and text data efficiently across the internet. Company roles center on building digital communication options that help businesses stay connected with their audience through simple internet interfaces.