Senior Manager, Security Incident Response
Listed on 2026-07-22
-
IT/Tech
Cybersecurity, Security Management & Operations
About Us
Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day.
About the RoleAs the SIRT Manager, you will lead Twitch's Security Incident Response Team, reporting to the VP of Security. You'll oversee a team responsible for detecting and handling security incidents, and be an advocate for lessons learned from incidents across Twitch. You bring expertise in threat intelligence, detection engineering, and incident response. Your team will work directly with affected teams to contain and learn from incidents.
We encourage you to apply if you have a combination of the skills outlined below.
You can work from San Francisco, CA;
Irvine, CA or Seattle, WA!
- As SIRT Manager, you will initially participate in, and graduate to escalation for, an on-call rotation of your direct reports on the Incident Response Team
- You will identify opportunities for automation to enhance your team's efficiency
- You will qualify reports or alerts of activity as security incidents using clear guidelines that establish what constitutes a security incident
- You will evaluate the potential and realized impact of security incidents to Twitch
- You will communicate security incident details, impact assessments, and response actions to leadership and executive partners
- You will foster a culture of learning and knowledge sharing within your team and across the organization
- Medical, Dental, Vision & Disability Insurance
- 401(k)
- Maternity & Parental Leave
- Flexible PTO
- Amazon Employee Discount
- Experience scripting for automation (e.g., Python, Perl, Ruby)
- You have 5+ years managing a team of incident handlers and security engineers, or 2 years of management experience with at least 3 years of hands‑on security incident response work
- You have delivered security programs like network security monitoring, cloud security monitoring, incident response, threat hunting, or other reactive information security programs
- Your approach to incident response is collaborative, not combative
- You have in-depth knowledge of internet security issues and the threat landscape
- You have a background in cloud, host, network, and application security
- Experience managing and mitigating high impact security risks on a global platform
- Familiarity with Twitch
Twitch is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Los Angeles County ApplicantsJob duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position.
These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Francisco Fair Chance Ordinance
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Salary and BenefitsBase salary range for this position:
USA, CA, Irvine - - USD annually
USA, CA, San Francisco - - USD annually
USA, WA, Seattle - - USD annually
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).