Job Description
Staff Security Engineer
Location: Remote – US
See yourself at Twilio
Join the team as our next Staff Security Engineer
Who we are & why we’re hiring
Twilio powers real-time business communications and data solutions that help companies and developers worldwide build better applications and customer experiences.
Although we’re headquartered in San Francisco, we’re on a journey to becoming a globally antiracist company that supports diversity, equity & inclusion wherever we do business. We employ thousands of Twilions worldwide, and we’re looking for more builders, creators, and visionaries to help fuel our growth momentum.
About the job
The Threat Detection and Response team is looking for a Staff Security Engineer who is passionate about solving the business’s toughest technical-security challenges; you will work within a Security Engineering team that partners with R&D Engineering and R&D Business teams to develop scalable processes and technical solutions. You will be a valued member of a team of deeply technical Security Engineers to focus on creating bespoke and standard Security tooling, enhancing our capabilities for threat mitigation and incident response, and then automating as much as you possibly can (and more)! You will help us to grow our global, scaled team and program.
Responsibilities
In this role, you’ll:
- Be an Owner: Participate in daily operations tasks including, on-call rotation, architecting and developing well-engineered and performant detective tooling and automation, participating in applications/systems threat modeling, and participating in Incident Response activities
- Write It Down: Work with the team to align the Detection and Response vision and strategy, while engaging the team to develop and ship specific, multi-year roadmaps, programs, and projects, ensuring prioritization, resourcing, and timely delivery of work within a changing business environment
- Wear the customer’s shoes: Work cross-collaboratively to understand and help solve challenges related to a broad spectrum of threat actors and activity
- Ruthlessly Prioritize: Proactively identify areas that would most benefit the improvement of our business, inclusive of the Incident Response program and with consideration of company/organizational objectives
- Don’t Settle: Challenge the status quo; perform technology research, security research, and architecture reviews needed for a thorough understanding of the Twilio platform to understand what we are defending and how best to defend it
- Draw the Owl: Building systems and services to make the most complex security problems simple and frictionless
- Empower Others: Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team’s work
- Be Inclusive: Provide mentorship, support, and care for the team in a way that enables long-term career development, happiness, and success at scale
Qualifications
Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having desired qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn’t followed a traditional path, don’t let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
Required:
- Proven experience: years of engineering in a production-cloud environment
- Subject-matter expert on security issues and technologies
- Full-stack software developer
- Advanced knowledge of service-oriented architectures, as well as experience with security tools and technologies fit for a cloud environment
- Experience working across a technology stack on difficult security challenges and initiatives
- Experience with SIEM platforms and the ability to extend their functionality
- Experience with SOAR tools and automating manual security processes
- Experience with infrastructure as code, such as Terraform or Pulumi
- Experience in at least 1 compiled, and 1 interpreted language
- Experience in either AWS, GCP, or other large cloud platform
Desired:
- Excellent written and verbal communication skills
- Ability to influence and build effective working relationships with every level of the organization.
- BS in Computer Science, Engineering, or a related technical discipline or equivalent experience
