Security Incident Response Engineer — Automation & On-Call

Amazon; San Francisco (CA); On-site; USD 167,000 - 213,000; Full time

Benefits offered by this job

Medical, Dental, Vision & Disability

401(k)

Maternity & Parental Leave

Flexible PTO

Amazon Employee Discount

Job summary

Twitch is seeking a Security Incident Response Engineer to join the SIRT in San Francisco, Irvine, or Seattle. You will handle security incidents, coordinate across teams, and help improve detection and response playbooks to protect the Twitch platform.

Ideal candidates have strong incident response experience, cloud security knowledge, and the ability to design AI/ML-driven automations. This on-site role emphasizes collaboration and continuous security improvements across our global operations.

Qualifications

• 3+ years of information security and compliance experience or degree in a related field
• Automation experience using scripting or programming languages (Go, Python, Ruby, Shell, or Perl)
• Ability to design and implement AI/ML-driven playbooks to automate security operations
• Experience coordinating responses to security incidents
• Knowledge of security issues and threat landscape
• Background in cloud, host, network, and application security
• Familiarity with IR frameworks or lifecycle models (NIST-800-61, ISO/IEC 27035)

Responsibilities

• Participate in on-call rotation within the Security Incident Response Team
• Qualify reports/alerts to classify security incidents
• Evaluate potential impact of incidents on Twitch
• Analyze threat actor TTPs
• Coordinate with teams to respond to incidents
• Write procedures to ensure repeatable, measurable work
• Communicate incident timelines to peers and leadership
• Lead lessons learned discussions and drive cross-team changes
• Investigate, document, and implement detection and automation in daily processes

Skills

InfoSec experience

Automation scripting

AI/ML playbooks

Incident response coordination

Threat landscape knowledge

Cloud security

NIST/ISO familiarity

Education

B.S./M.S. in CS/Engineering/Software Security

Related technical discipline

Job description

Twitch is seeking a Security Incident Response Engineer to join the SIRT in San Francisco, Irvine, or Seattle. You will handle security incidents, coordinate across teams, and help improve detection and response playbooks to protect the Twitch platform.

Ideal candidates have strong incident response experience, cloud security knowledge, and the ability to design AI/ML-driven automations. This on-site role emphasizes collaboration and continuous security improvements across our global operations.