InternFlow

Greenhouse ·

full-time

Security Incident Response Engineer

Twitch · Irvine, CA

Twitch operates the world’s largest live‑streaming service, hosting communities around gaming, entertainment, music, sports, cooking and many other interests. As a Security Incident Response Engineer on the Security Incident Response Team (SIRT), you will join a rotating on‑call squad that evaluates alerts, determines whether they constitute security incidents, and measures both potential and realized impact on the platform. Daily work includes analyzing threat actor tactics, techniques and procedures, coordinating with affected engineering and product teams to contain and remediate issues, and documenting findings in clear, repeatable procedures. You will also build and refine automations—using Go, Python, Ruby, Shell or Perl—to enrich, triage and respond to alerts, and lead lessons‑learned sessions that drive improvements across the business. The role calls for three or more years of information‑security experience, a background in cloud, host, network and application security, familiarity with frameworks such as NIST‑800‑61 or ISO/IEC 27035, and scripting ability. A passion for protecting Twitch’s global community and comfort working in hybrid‑cloud environments (AWS, GCP) are advantageous.

security incident responsesirt engineeron-call rotationthreat analysisautomation scriptingcloud securityir frameworkstwitch platformcross-team coordinationlessons learned

Education

  • Level: Bachelor's degree, Postgraduate
  • Courses: Information Security, Information Systems, Computer Science, Computer Engineering, Software Security
  • Specializations: Information Security, Information Systems, Computer Science, Computer Engineering, Software Security
Security Incident ResponseOnsite3-3 yrs experience

Key Skills

GoPythonRubyShellPerlAI/MLAWSGCPCloudTrailNIST-800-61ISO/IEC 27035

Notes

On-call rotation; Flexible PTO; Medical, Dental, Vision & Disability Insurance

Experience required

3-3 years experience
0 yrs10+ yrs

About the Role Twitch is looking for a Security Incident Response Engineer to join the SIRT, reporting to the SIRT Manager, to find, handle, and learn from security incidents across the global platform. Responsibilities Participate in an on‑call rotation; Qualify reports or alerts as security incidents; Evaluate impact of incidents; Analyze threat‑actor tactics, techniques, and procedures; Communicate timelines and impact to peers and leadership; Coordinate response activities with affected teams; Investigate, document, and implement detection, enrichment, triage, response, and communication automations; Lead lessons‑learned discussions and drive change to reduce recurrence. Requirements 3+ years of relevant information security experience; BS degree in Information Security, Information Systems, Computer Science, Computer Engineering, or related field (MS preferred); Automation experience using Go, Python, Ruby, Shell, or Perl; Ability to design AI/ML‑driven playbooks; Knowledge of cloud, host, network, and application security; Familiarity with NIST‑800‑61, ISO/IEC 27035 frameworks; Experience with AWS, GCP, CloudTrail. Eligibility Bachelor’s degree required; Master’s degree considered a plus; Minimum 3 years experience.

Skills for this role

GoPythonRubyShellPerlAI/MLAWSGCPCloudTrailNIST-800-61ISO/IEC 27035

Required skills

GoPythonRubyShellPerlAI/MLAWSGCPCloudTrailNIST-800-61ISO/IEC 27035

Also mentioned in the listing

security incident responsesirt engineeron-call rotationthreat analysisautomation scriptingcloud securityir frameworkstwitch platformcross-team coordinationlessons learned
RoleSecurity Incident Response Engineer
CompanyTwitch
LocationIrvine, CA
CompensationNot disclosed
Posted2026-09-18
DeadlineRolling

Typical process for this type of role

A general guide — the exact steps for this specific listing may vary; check the original posting for details.

  1. 1ApplicationSubmit your resume through the apply link.
  2. 2ScreeningRecruiter reviews your background against the role.
  3. 3AssessmentA technical test, assignment, or coding round, depending on the role.
  4. 4Interview(s)One or more rounds with the hiring team.
  5. 5OfferOffer letter with compensation and start date.

Before you apply

0/4

Security Incident Response Engineer at Twitch: frequently asked questions

Who can apply for the Security Incident Response Engineer role at Twitch?
The listing asks for Bachelor's degree, Postgraduate degree (Information Security, Information Systems, Computer Science, Computer Engineering, Software Security); 3-3 years of experience.
What skills does the Security Incident Response Engineer role require?
The listing highlights Go, Python, Ruby, Shell, Perl, AI/ML, AWS, GCP, CloudTrail, NIST-800-61. Show each of these in a project or past role on your resume.
What is the salary for this role?
Twitch has not stated compensation in the listing. Check the original posting or ask during the application process.
Is the Security Incident Response Engineer position remote, hybrid or onsite?
The listing marks this role as onsite, with Irvine, CA as the location.
What is the application deadline?
Twitch has not listed a fixed deadline, so apply early in case the opening is filled.
How do I apply for the Security Incident Response Engineer role?
Use the Apply button on this page. It opens the original listing on job-boards.greenhouse.io, where you submit your application with the company.

More at Twitch

Other jobs at Twitch

See all 16 openings at Twitch

Explore Related Placements


// similar opportunities

You might also like

Security Incident Response Engineer

Twitch

Seattle, WAfull-time
Greenhouse

About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It ...

Apply now →

Staff Security Engineer, Incident Response

Databricks

Databricks logo
Europefull-time
Top Company
Arbeitnow

RDQ327R180 Staff Security Engineer, Incident Response The Incident Response team's mission is to respond to security threats, incidents and investigations to pr...

Apply now →

Sr Staff Product Security Engineer - Product Security Incident Response Team (psirt)

Servicenow

Petah Tikva, ilfull-time
Top Company
Any GraduateSmartRecruiters

No description available.

Apply now →

Security Engineer - Detection And Response

Spotify

New York, NYfull-time
Lever

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the ...

Apply now →

Senior Security Engineer, Detection & Response

Robinhood

Bellevue, WA; Denver, CO; Menlo Park, CAfull-time
HybridAny GraduateGreenhouseSecurity Operations# Incident Response# Detection Engineering# Kubernetes# Cloud Security+4 more

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger gene...

['In-person attendance expected at least 3 days per week', '5+ years experience required']

Apply now →

Senior Security Engineer

Mixpanel

London, UK (Hybrid)full-time
Greenhouse

About Mixpanel Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the ...

Apply now →