Security Incident Response Engineer
Core
Lead the detection, triage, and response to security incidents across Twitch's global live streaming platform, coordinating with affected teams to mitigate impact and implement automated detection playbooks.
Role type
Senior Security Incident Response Engineer
Builds
Automated agentic detection, enrichment, triage, response, and communication workflows for security operations
Domain
Information Security / Cloud Security / Incident Response
Deliverable
production ML models | infrastructure
Required skills
Incident response coordination, threat actor TTP analysis, security automation scripting (Go, Python, Ruby, Shell, Perl), cloud security (AWS, GCP), log analysis, NIST-800-61/ISO/IEC 27035 frameworks, AI/ML-driven playbook design
Preferred skills
Streaming platform experience, hybrid cloud incident handling, advanced degree in security/CS
Technologies
AWS, GCP, CloudTrail, Go, Python, Ruby, Shell, Perl
Responsibilities
Qualify security alerts as incidents, evaluate incident impact, analyze threat actor tactics, coordinate response activities with affected teams, implement automation for detection and response, lead lessons learned discussions to reduce recurrence
Seniority
Senior, hands-on IC