Security Incident Response Engineer, Security Posture Improvement and Resilience Engineering

If you are interested in this position please apply on Twitchs Career sitehttps:// Us:

Twitch is the worlds biggest live streaming service with global communities built around gaming entertainment music sports cooking and more. It is where thousands of communities come together for whatever every day.

Were about community inside and out. Youll find coworkers who are eager to team up collaborate and smash (or elegantly solve) problems together. Were on a quest to empower live communities so if this sounds good to you see what were up to onLinkedInand X and discover the projects were solving on ourBlog. Be sure to explore ourInterviewing Guideto learn how to ace our interview process.

About the Role

Twitch is looking for a Security Incident Response Engineer to join our SIRT. Reporting to the SIRT Manager youll be at the heart of our mission to find handle and learn from security incidents across our global platform. Were looking for engineers who thrive coordinating response to emerging issues in information security who are ready to level up our defense. If youre passionate about protecting the Twitch community and solving complex security puzzles we want to hear from you!

You can work from San Francisco CA; Irvine CA; or Seattle WA.

You Will

- Participate in an on-call rotation that includes your peers on the Security Incident Response Team
- Qualify reports or alerts of activity as security incidents using clear guidelines that establish what a security incident is
- Evaluate the potential and realized impact of security incidents to Twitch
- Analyze threat actor tactics techniques and procedures
- Participate or create information sharing groups; communicate securely and responsibly
- Write and follow clear procedures so that our work can be accountable repeated measured and improved
- Communicate with peers and leadership about timeline of a security related event with what potential and realized impact how we discovered it and how were handling it
- Coordinate security incident response activities with affected teams to do the right thing for our customers and our organization
- Investigate document and implement agentic detection enrichment triage response and communication automations in every day processes
- Lead lessons learned discussions and help teams effect change across the business that reduces incident recurrence

Perks
* Medical Dental Vision & Disability Insurance
* 401(k)
* Maternity & Parental Leave
* Flexible PTO
* Amazon Employee Discount

- 3 years of information security and compliance experience or Bachelors degree in computer science engineering analytics mathematics statistics IT or equivalent
- Automation experience using scripting or programming languages (Go Python Ruby Shell or Perl)
- Ability to securely design and implement AI/ML-driven playbooks to automate common security operations
- Experience coordinating responses to security incidents
- Knowledge of security issues and threat landscape
- Background in cloud host network and application security
- Familiarity with common Incident Response frameworks or lifecycle models like NISTISO/IEC 27035 etc.

- B.S. or M.S. in Computer Science Computer Engineering Software Security or a related technical discipline
- Experience and familiarity with streaming and content creation
- Experience handling security incidents in hybrid cloud environment (AWS GCP) and conducting log dives on cloud telemetry like CloudTrail
- Passion and excitement for Twitch

Twitch is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees supervisors and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees supervisors and staff to ensure exceptional customer service; and follow all federal state and local laws and Company policies. Criminal history may have a direct adverse and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above as well as the abilities to adhere to company policies exercise sound judgment effectively manage stress and work safely and respectfully with others exhibit trustworthiness and professionalism and safeguard business operations and the Companys reputation. Pursuant to the Los Angeles County Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.

Pursuant to the San Francisco Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at CA IRVINE - 159300.00 - 202400.00 USD annually
USA CA SAN FRANCISCO - 166600.00 - 212800.00 USD annually
USA WA Seattle - 159300.00 - 202400.00 USD annually