Remote Senior Security Incident Response Lead

SendGrid; United States; On-site; USD 149,000 - 187,000; Full time

Job summary

Twilio is seeking a Senior Security Engineer to lead technical responses to security events across its global infrastructure. You will triage, contain, remediate, and help post-incident improvements while collaborating with R&D Engineering and business teams.

You will document incidents, develop runbooks, and drive security improvements, while mentoring teammates and supporting on-call duties in a fast-paced environment.

Qualifications

• 5+ years of security incident response in production-cloud environments.
• Subject-matter expert on security issues and technologies.
• Experience with AI for security incident response activities.
• Advanced knowledge of service-oriented architectures and cloud security tools.
• Experience across a tech stack on security challenges and initiatives.
• Experience with SIEM platforms and extending their functionality.
• Experience with SOAR and automating security processes.
• Experience in AWS, GCP, or other large cloud platforms.
• Excellent written and verbal communication skills.
• Ability to influence and build relationships at all levels.

Responsibilities

• Lead and support the response to security events across Twilio’s global infrastructure, services, and applications.
• Document incidents and projects; craft runbooks and SOPs to share knowledge.
• Collaborate across teams to address threat actors and activity.
• Improve security posture by driving improvements from incidents.
• Continuously learn new skills in a fast-paced environment.
• Own the security incident lifecycle, participate in on-call, and conduct RCAs.
• Mentor and support team growth and career development.

Skills

5+ years in incident response

Security incident response expert

Cloud security

Written & verbal communication

Cross-team collaboration

On-call experience

Tools

SIEM

SOAR

AWS or GCP

Job description

Twilio is seeking a Senior Security Engineer to lead technical responses to security events across its global infrastructure. You will triage, contain, remediate, and help post-incident improvements while collaborating with R&D Engineering and business teams.

You will document incidents, develop runbooks, and drive security improvements, while mentoring teammates and supporting on-call duties in a fast-paced environment.