Remote opportunity at
TwilioSecurity Engineer, Incident Response
Twilio is seeking a Security Engineer, Incident Response to join its Security Incident Response Team (SIRT). In this remote role based in Ireland or the UK,…
Career Tools
About This Role
Twilio is seeking a Security Engineer, Incident Response to join its Security Incident Response Team (SIRT). In this remote role based in Ireland or the UK, you will guide technical responses to security events across global services, infrastructure, and applications. The work involves handling the complete incident lifecycle, driving remediation, creating operational procedures, and automating security processes. This position suits an experienced security professional who wants to build scalable defenses…
Job Description
Twilio is seeking a Security Engineer, Incident Response to join its Security Incident Response Team (SIRT). In this remote role based in Ireland or the UK, you will guide technical responses to security events across global services, infrastructure, and applications. The work involves handling the complete incident lifecycle, driving remediation, creating operational procedures, and automating security processes. This position suits an experienced security professional who wants to build scalable defenses and tackle complex threat challenges in a fast-paced environment.
Twilio develops communications solutions utilized by numerous businesses and developers globally. Operating as a remote-first organization, the company emphasizes global inclusion and connection, while occasionally requiring in-person attendance for team off-sites, customer meetings, or project gatherings. Employees are encouraged to take initiative, solve difficult technical problems, and contribute to community volunteering efforts.
As a member of the SIRT group, you will partner closely with R&D engineering and business teams to formulate technical solutions and standard workflows. The role requires participating in an on-call rotation, managing post-incident reviews, and leveraging artificial intelligence tools for incident response and threat detection tasks. Candidates should possess a strong background in cloud environments, SIEM platforms, and SOAR automation tools.
Responsibilities
- Manage the response to security incidents and events across global applications, infrastructure, and services
- Own the full security incident lifecycle, participate in on-call rotations, and lead root cause analyses
- Produce incident documentation, standard operating procedures, and runbooks to share knowledge internally
- Collaborate across departments to mitigate risks posed by diverse threat actors and activities
- Drive post-incident improvements to enhance the overall reliability and security posture
- Build automated security processes utilizing SOAR tools and extend SIEM platform capabilities
- Mentor and support team members to foster long-term career growth and success
Requirements
- At least 3 years of hands-on security incident response experience within a production cloud environment
- Demonstrated subject-matter expertise concerning security technologies and issues
- Proficiency in leveraging AI for complex security incident response tasks and generating high-fidelity detections
- Advanced understanding of service-oriented architectures and cloud-native security tools
- Practical background using SIEM platforms with the ability to extend their functionality
- Hands-on familiarity with SOAR tools and manual process automation
- Experience working within major cloud platforms such as AWS or GCP
- Strong verbal and written communication skills with the ability to influence staff at all organizational levels
Qualifications
- Experience implementing controls and safeguards for AI model security and posture management against prompt injections, model evasion, and data poisoning
- Ability to utilize GenAI and LLM-based security use cases to contextualize threat data and reduce false positives
- Capability to collect intrusion artifacts and forensically sound images for analyzing source code, trojans, and malware
- Experience monitoring external vendor data and threat intelligence to defend against emerging risks
Core Skills
Benefits
- Competitive pay
- Generous time off
- Ample parental and wellness leave
- Healthcare coverage
- Retirement savings program
- Support for employee volunteering and donation efforts
Frequently Asked Questions
Is this a remote position?
Yes, this is a remote role, though it is specifically based in Ireland or the U.K. Occasional travel may be required for project meetings, team gatherings, or customer sessions.
What are the primary experience requirements for this role?
Applicants must have at least 3 years of security incident response experience in a production-cloud environment, along with advanced knowledge of service-oriented architectures, SIEM platforms, and SOAR tools.
What is the employment type for this job?
The posting indicates that the position is full-time.
What salary does Twilio offer for this role?
The source posting does not specify the salary for this position.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
