Twitter is what’s happening and what people are talking about right now. For us, life's not about a job, it's about purpose. We feel real change starts with conversation. Here, your voice matters. Come as you are and together we'll do what's right (not what's easy) to serve the public conversation.

Who We Are

The Detection & Response Team focuses on identifying and responding to security incidents targeting Twitter. Our primary mission is to help protect Twitter’s customers, its employees and the company's data. We accomplish this by identifying unusual or malicious information security threats and performing investigations into computer security incidents.

What You’ll Do

You'll join a team of hardworking individuals focused on identifying and responding to security and privacy incidents impacting Twitter, its customers, and employees. You’ll be responsible for reviewing, validating, classifying, and responding to security and privacy events. When performing investigations you will help us answer "what happened", "why did it happen", "what was the impact", and "how do we remediate". You will be responsible for keeping detailed timelines and thorough documentation of incidents. When responding to an incident you will lead a multi-functional group of security and privacy professionals, engineers, lawyers and more to remediate the issue. You will also design new and improve processes and procedures to improve incident handling and streamline security event processing.You will also design new or improve existing processes and procedures to improve incident handling and streamline security event processing.

Who You Are

You have expertise in investigating and responding to security incidents. You're an advocate for the security and privacy of users and their data. When faced with ambiguity you aren't intimidated and you seek answers through peers, documentation, specialists, experimentation, and more. You are detailed in your documentation of events and comfortable communicating time-sensitive and relevant information to audiences with a wide range of technical knowledge. You love learning from and engaging with peers, researchers, and other engineers in the security community. You aren't satisfied with the status quo; you look for opportunities to simplify, automate, and improve.

Preferred Qualifications

• Experience performing computer security incident detection & response activities
• Knowledge and understanding of malware, attacker tactics, techniques, and procedures.
• Knowledge of common application/system vulnerabilities, threat actors and mitigations.
• Knowledge of at least two of these security topics: malware analysis, software vulnerabilities, cryptography, web application security, identity and access management, network security, operating system hardening, data forensics
• Systems administration experience in Linux, Windows and/or macOS is a plus.
• Experience with cloud deployment environments such as GCP or AWS.
• Experience with SQL and large datasets, specifically for security investigations
• Experience communicating security concerns and issues to non-technical audiences.
• Flexibility to participate in a 24/7 on-call rotation

​​​​​Equal Opportunity Statement

We are committed to an inclusive and diverse Twitter. Twitter is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status, or any legally protected status.

A few other things we value:

• Challenge - We solve some of the industry’s hardest problems. Come to be challenged, learn, and thrive as an engineer.
• Diversity - Diversity makes us a better organization and team. We value diverse backgrounds, ideas, and experiences.
• Work, Life, Balance - We work hard, but we believe with hard work should come balance.