Staff AI Security Engineer - Threat Hunting (Remote)

Twilio Inc.; United States; Hybrid; USD 165,000 - 206,000; Full time

Benefits offered by this job

Health care insurance

401(k) retirement plan

Paid sick time

Paid personal time off

Paid parental leave

Equity plan

Job summary

Twilio is seeking a Staff AI Security Engineer, Threat Hunting, to strengthen detection, response and automation. You’ll shape scalable security tooling, work with R&D and business teams, and help defend our cloud platforms. You’ll mentor peers and lead security research to improve defenses across Twilio’s remote-first organization.

The role emphasizes ownership, cross-team collaboration, and delivering high-fidelity detections using AI and automation in a fast-growing environment.

Qualifications

• 3+ years of security engineering in production-cloud environments.
• Experience with AI agents and agentic workflows.
• Strong communication and cross-functional collaboration.

Responsibilities

• Own daily operations, on-call rotation, and threat-detection tooling.
• Align Detection & Response strategy with multi-year roadmaps.
• Collaborate across teams to solve broad threat challenges.
• Prioritize improvements to Incident Response and platform defenses.
• Perform security research and architecture reviews for Twilio.
• Build scalable systems to simplify complex security problems.
• Mentor and support team members for long-term growth.

Skills

Security engineering

AI agents

Threat hunting

Incident response

MITRE ATLAS

Cloud security

SOAR

Terraform / IaC

AWS / GCP

Communication

Education

BS in Computer Science or Engineering

Tools

SIEM

Security tooling

Job description

At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences.

Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.
.

Hiring and how we work

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!

Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings.
.

See yourself at Twilio

Join the team as Twilio’s next Staff Security Engineer, Threat Hunting

About the job

The Threat Detection and Response team is looking for a Staff Security Engineer who is passionate about solving the business’s toughest technical-security challenges; you will work within a Security Engineering team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security tooling, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.

Responsibilities

In this role, you’ll:

• Be an Owner: Participate in daily operations tasks including, on-call rotation, architecting and developing well-engineered and performant detective tooling and automation, participating in applications/systems threat modeling, and participating in Incident Response activities
• Write It Down: Work with the team to align the Detection and Response vision and strategy, while engaging the team to develop and ship specific, multi-year roadmaps, programs, and projects, ensuring prioritization, resourcing, and timely delivery of work within a changing business environment
• Wear the customer’s shoes: Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity
• Ruthlessly Prioritize: Proactively identify areas that would most benefit the improvement of our business, inclusive of the Incident Response program and with consideration of company/organizational objectives
• Don’t Settle: Challenge the status quo; perform technology research, security research, and architecture reviews needed for a thorough understanding of the Twilio platform to understand what we are defending and how best to defend it
• Draw the Owl: Building systems and services to make the most complex security problems simple and frictionless
• Empower Others: Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work
• Be Inclusive: Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• Proven experience: 3+ years of security engineering in a production-cloud environment
• Subject-matter expert on security issues and technologies
• Experience designing and building AI Agents and Agentic workflows
• Ability to utilize AI for comprehensive, complex threat hunting activities delivering high fidelity detections
• Experience detecting and responding to next generation, Artificial Intelligence threats following MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) or similar framework
• Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
• Experience working across a technology stack on difficult security challenges and initiatives
• Experience with SIEM platforms and the ability to extend their functionality
• Experience with SOAR tools and automating manual security processes
• Experience with infrastructure as code, such as Terraform or Cloudformation
• Experience in either AWS, GCP, or other large cloud platform
• Excellent written and verbal communication skills
• Ability to influence and build effective working relationships with every level of the organization.
• BS in Computer Science, Engineering, or a related technical discipline or equivalent experience

Location

This role will be remote,but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Compensation

*Please note the salary range information provided applies only to candidates residing in California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State due to local requirements. Compensation for candidates in other locations will be discussed during the hiring process. Please note that hiring for this role is not restricted to the locations listed above.

The estimated pay ranges for this role are as follows:

• Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $155,520.00 - $194,400.00.
• Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $164,640.00 - $205,800.00.
• Based in the San Francisco Bay area, California: $182,960.00 - $228,700.00.
• This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Applications for this role are intended to be accepted until Oct 9th, but may change based on business needs.

Twilio thinks big. Do you?

We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call Twilio Magic . Additionally, we empower employees to build positive change in their communities by supporting their volunteering and donation efforts.

So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now! If this role isn't what you're looking for, please consider other open positions.

.

Stay alert to recruitment fraud

We care about your safety. Scammers sometimes impersonate Twilio recruiters through fake job postings, emails, websites, or messages. Please ensure you are engaging with an official @ twilio.com email address. We will never ask for payment, gift cards, cryptocurrency, or banking information during the recruiting process. We do not make job offers without a formal interview process or conduct interviews exclusively through text-based messaging apps.

.

Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Apply for this job

*

indicates a required field

First Name *

Last Name *

Preferred First Name *

Email *

Phone

Country *

Phone *

Location (City) *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

How did you hear about Twilio? *

LinkedIn

Twitter

Indeed

Conference or Event

Other

Please click all that apply

Are you legally authorized to work in the country in which this role is located? * Select...

What is the source of your right to work where this role is listed? * Select...

By clicking the "Acknowledge" button, you acknowledge that Twilio processes data in accordance with the Twilio Applicant Privacy Policy. *

By checking this box, I confirm I have read, reviewed and understood the guidelines outlined in the Candidate AI Responsible Use Policy. I affirm that all the information and materials I submit throughout my application and candidacy will reflect my own work and experience. *

Updated - Twilio is proud to be an Equal Employment Opportunity employer

We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.

Voluntary Self-Identification of Race & Ethnicity and Protected Veterans Status

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary . Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Twilio’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Voluntary Self-Identification of Gender * Select...

Voluntary Self-Identification of Race/Ethnicity * Select...

Select...

Voluntary Self-Identification of Sexual Orientation * Select...

By checking this box, I consent to Twilio collecting, storing, and processing my responses to the demographic data surveys above. *