Senior Manager, SIRT

Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day.

We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X,  and discover the projects we’re solving on our Blog. Be sure to explore our Interviewing Guide to learn how to ace our interview process.

As the SIRT Manager, you will lead Twitch's Security Incident Response Team, reporting to the VP of Security. You'll oversee a team responsible for detecting and handling security incidents, and be an advocate for lessons learned from incidents across Twitch. You bring expertise in threat intelligence, detection engineering, and incident response. Your team will work directly with affected teams to contain and learn from incidents. We encourage you to apply if you have a combination of the skills outlined below.

You can work from San Francisco, CA; Irvine, CA or Seattle, WA!

• As SIRT Manager, you will initially participate in, and graduate to escalation for, an on-call rotation of your direct reports on the Incident Response Team
• You will identify opportunities for automation to enhance your team's efficiency
• You will qualify reports or alerts of activity as security incidents using clear guidelines that establish what constitutes a security incident
• You will evaluate the potential and realized impact of security incidents to Twitch
• You will communicate security incident details, impact assessments, and response actions to leadership and executive partners
• You will foster a culture of learning and knowledge sharing within your team and across the organization

• You have 5+ years managing a team of incident handlers and security engineers, or 2 years of management experience with at least 3 years of hands-on security incident response work
• You have delivered security programs like network security monitoring, cloud security monitoring, incident response, threat hunting, or other reactive information security programs
• Your approach to incident response is collaborative, not combative
• You have automation experience using scripting or programming languages (Go, Python, Ruby, or Bash)
• You have in-depth knowledge of internet security issues and the threat landscape
• You have a background in cloud, host, network, and application security

• Experience managing and mitigating high impact security risks on a global platform
• Familiarity with Twitch

• Medical, Dental, Vision & Disability Insurance
• 401(k)
• Maternity & Parental Leave
• Flexible PTO
• Amazon Employee Discount

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 

Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 

Job ID: TW9234