Security Incident Response Engineer, Security Posture Improvement and Resilience Engineering
Core
Security Incident Response Engineer responsible for finding, handling, and learning from security incidents across Twitch's global live streaming platform.
Role type
Senior IC Security Incident Response Engineer
Builds
Automated detection, enrichment, triage, response, and communication playbooks for security operations
Domain
Information Security / Cloud Security / Incident Response
Deliverable
production ML models | infrastructure
Required skills
Incident response coordination, threat actor analysis, security automation scripting (Go, Python, Ruby, Shell, Perl), cloud security (AWS, GCP), log analysis, NIST-800-61/ISO/IEC 27035 frameworks, AI/ML-driven playbook design
Preferred skills
Streaming/content creation domain knowledge, hybrid cloud incident handling, advanced degree in CS/Security
Technologies
AWS, GCP, CloudTrail, Go, Python, Ruby, Shell, Perl
Responsibilities
Participate in on-call rotation for security incidents, qualify alerts as incidents, evaluate impact of incidents, analyze threat actor TTPs, create information sharing groups, write and follow incident response procedures, communicate incident timelines and impacts to leadership, coordinate response with affected teams, implement automation in daily processes, lead lessons learned discussions
Seniority
Senior, hands-on IC
