Security Incident Response Engineer — On-Call, Playbooks, Impact

Twitch; San Francisco (CA); On-site; USD 167,000 - 213,000; Full time

Benefits offered by this job

Health insurance

401(k)

Maternity & Parental Leave

Flexible PTO

Amazon Employee Discount

Job summary

Twitch is seeking a Security Incident Response Engineer to join our SIRT. You will help find, handle, and learn from security incidents across our global platform, coordinating response and improving processes.

You can work from San Francisco, Irvine, or Seattle as part of a distributed team. Responsibilities include on-call duties, incident qualification, impact assessment, threat analysis, and cross-team collaboration to implement automated detections and playbooks.

Qualifications

• 3+ years relevant information security experience or a BS in Information Security, Information Systems, Computer Science, Computer Engineering, or related fields.

Responsibilities

• Participate in an on-call rotation with peers on the Security Incident Response Team.
• Qualify reports or alerts of activity as security incidents using clear guidelines.
• Evaluate the potential and realized impact of security incidents to Twitch.
• Analyze threat actor tactics, techniques, and procedures.
• Coordinate security incident response activities with affected teams to protect customers and the organization.
• Lead lessons learned discussions and help teams implement changes to reduce recurrence.

Skills

Incident response coordination

Automation scripting

AI/ML playbooks

Threat landscape knowledge

Education

BS in Information Security / Information Systems / Computer Science / Computer Engineering

Tools

Go

Python

Ruby

Shell

Perl

Job description

Twitch is seeking a Security Incident Response Engineer to join our SIRT. You will help find, handle, and learn from security incidents across our global platform, coordinating response and improving processes.

You can work from San Francisco, Irvine, or Seattle as part of a distributed team. Responsibilities include on-call duties, incident qualification, impact assessment, threat analysis, and cross-team collaboration to implement automated detections and playbooks.