Twitch
Security Incident Response Engineer
About this role
Twitch seeks a Security Incident Response Engineer to join its Security Incident Response Team, handling detection, analysis, and coordination of security incidents across the platform. You'll participate in on-call rotations, investigate threats, automate response procedures, and lead post-incident improvements in a fast-paced, collaborative environment.
What you'll do
- Participate in on-call rotation to respond to emerging security incidents
- Qualify and evaluate security alerts and reported incidents for impact assessment
- Analyze threat actor tactics, techniques, and procedures to understand attacks
- Coordinate incident response activities with affected teams and leadership
- Build and implement automation playbooks for detection, triage, and response workflows
- Lead lessons learned discussions and drive organizational improvements to prevent recurrence
What they're looking for
- Incident response coordination and investigation
- Scripting or programming (Python, Go, Ruby, Shell, Perl)
- Cloud security (AWS, GCP) and CloudTrail analysis
- Threat analysis and MITRE ATT&CK framework knowledge
- AI/ML-driven automation for security operations
- Incident response frameworks (NIST-800-61, ISO/IEC 27035)
- Host, network, application, and cloud security
- Security documentation and communication
Benefits
- Medical, Dental, Vision, and Disability Insurance
- 401(k) retirement plan
- Flexible PTO
- Maternity and Parental Leave
- Amazon Employee Discount
- Work location flexibility (San Francisco, Irvine, or Seattle)
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Twitch
Twitch builds a platform for streaming and creator communities, offering features around user safety, memberships, and commerce to support millions of concurrent users. The company is hiring Software Engineers across multiple teams to develop scalable systems, moderation tools, and features that enhance experiences for creators and viewers.
- Website
- twitch.tv
Likely interview questions
- Walk us through a security incident you investigated—what was the impact, and how did you coordinate the response?
- How would you design an automated playbook to detect and respond to a common security incident at scale?