Security Engineer - Detection & Response

San Francisco, CA

Senior Security Engineer - Detection & Response
The Information Security Team partners with teams across the organization, supporting their ability to make strategic decisions informed by expert security analysis. We are a team of builders, breakers, and hunters. Our Security Engineers build tools and platforms to protect our users and secure the company.


The Detection & Response team focuses on identifying and responding to security incidents targeting Twitter. This team performs both investigation into suspicious activity and also plays a large role in the engineering and maintenance of security monitoring systems.


Responsibilities :

  • Advance network and application visibility, logging and detection capabilities

  • Design and engineer response tools to automate incident handling and streamline security event processing

  • Define security metrics to reveal trends and patterns of security incidents across Twitter

  • Monitor and define events for our Security Incident Event Management (SIEM) tool.

  • Work with the broader Information Security team to develop and mature our incident response processes and procedures

  • Work closely with our Security Engineers to identify suspicious patterns, develop signals, and investigate alerts.

  • Partner with engineering teams across Twitter to promote security enhancements for the benefit of intrusion detection and prevention

  • Team with our Risk Management group to develop a real-time risk monitoring process.


Highly Desired Qualifications

  • M.S. Computer Science, Data Science, Intelligence, or Security Studies Credentials: GIAC, CISSP, or CFE Criminal investigative experience: FBI or Secret Service cybersquad or equivalent Civil investigative experience: fraud audits & investigations, due diligence

  • Senior experience within a Security Operations Center or equivalent experience performing computer security incident detection & response activities

  • Experience with Security Information and Event Management tools

  • Programming/scripting skills in at least one of following: Python, Ruby, Go

  • Ability to effectively identify, analyze, and malware

  • Working knowledge of infrastructure security tools such as firewalls, network security monitoring (NSM), anti-malware, content management, OS hardening, etc.

  • Knowledge of common application/system vulnerabilities, threat actors and mitigations

  • Knowledge of both technical and operational network security fundamentals

  • Understanding of TCP/IP and common protocols (HTTPS, SSH, FTP, etc)

  • Familiarity with OS X, Linux, and Windows systems

  • Excellent oral, written and documentation skills

  • Flexibility to participate in on-call rotation

​We are committed to an inclusive and diverse Twitter. Twitter is an equal opportunity employer. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, age, disability, veteran status, genetic information, marital status or any other legally protected status.
San Francisco applicants: Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Engineering Hiring Process

Step 1

Once your application is received, a recruiter will reach out pending your qualifications are a match for the role.

Step 2

If your background is a match, you may have 1-2 technical phone interviews or be given the chance to provide a work sample depending on the role.

Step 3

If the phone interviews go well or your work sample is strong, the final step includes interviews with 5-6 people held onsite in our office.


Personal Information

This field is required.
This field is required.
This field is required.
This field is required.
Required field. PDFs only; max file size is 1MB.
Required field. PDFs only; max file size is 1MB.

U.S. Equal Opportunity Employment Information  (Completion is Voluntary)

At Twitter, we have a bold aspiration to reach every person on the planet. We believe that goal is more attainable with a team that understands and represents different cultures and backgrounds and we are committed to an inclusive and diverse Twitter. Twitter is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.

This is where you come in! Please take a few minutes to provide us with your information. Completing this form is entirely voluntary. Whatever your decision, there will be no adverse employment consequences.

You can view the ‘EEO is the Law’ poster here.

Twitter does not accept any unsolicited resumes from recruiting agencies and will not pay fees associated with any such resumes. Agencies, please do not send resumes to any Twitter location, employee, or email address.

Twitter, Inc. is committed to working with and providing access and reasonable accommodations to applicants with physical or mental disabilities. If you need an accommodation in order to apply for open job opportunities, please submit a description of your accommodation request to This email is only for accommodation requests related to the application process.

Thanks for applying!
Submission failed. Please make sure all fields are correctly formatted.

Don't see the right fit?

Check out other opportunities at Twitter.