Security Incident Response Engineer — Cloud & Automation

Amazon; Seattle (WA); Hybrid; USD 159,000 - 202,000; Full time

Benefits offered by this job

Medical, Dental, Vision & Disability

401(k)

Maternity & Parental Leave

Flexible PTO

Amazon Employee Discount

Job summary

Twitch, the world’s leading live streaming platform, is seeking a Security Incident Response Engineer to join the SIRT. You will handle security incidents, analyze threats, and improve automated response playbooks across our global platform.

Join a team that values proactive defense, clear documentation, and cross-team collaboration. You’ll work from Seattle, SF, or Irvine with on-call rotations and a focus on reducing incident recurrence.

Qualifications

• 3 years relevant experience in information security
• Automation experience using scripting languages (Go, Python, Ruby, Shell, or Perl)
• Ability to securely design and implement AI/ML-driven playbooks to automate common security operations
• Experience coordinating responses to security incidents
• Knowledge of security issues and threat landscape
• Background in cloud, host, network, and application security
• Familiarity with incident response frameworks (e.g., NIST-800-61, ISO/IEC 27035)

Responsibilities

• Participate in on-call rotation with Security Incident Response Team
• Qualify reports/alerts to define what constitutes a security incident
• Evaluate impact of security incidents on Twitch
• Analyze threat actor tactics, techniques, and procedures
• Coordinate response activities with affected teams
• Write and follow procedures to ensure accountability and repeatability
• Communicate incident timelines and impact to peers and leadership
• Lead lessons learned discussions and drive cross-team improvements
• Investigate and implement automation in day-to-day processes

Skills

Automation scripting

Incident response

Cloud security

Threat intel

Team communication

Education

BS in Information Security

Tools

Python

Go

Ruby

Shell

Perl

Job description

Twitch, the world’s leading live streaming platform, is seeking a Security Incident Response Engineer to join the SIRT. You will handle security incidents, analyze threats, and improve automated response playbooks across our global platform.

Join a team that values proactive defense, clear documentation, and cross-team collaboration. You’ll work from Seattle, SF, or Irvine with on-call rotations and a focus on reducing incident recurrence.