Security Engineer, Twilio

• You have 3+ years of professional experience in information security, with a focus on vulnerability management
• Strong understanding of security vulnerabilities, threat landscapes, and mitigation techniques
• Experience with vulnerability scanning tools and techniques
• Proficiency in scripting or programming languages (e.g., Python, Bash, etc.) for automation of security tasks
• Excellent problem-solving skills and ability to work under pressure
• Flexible and able to manage multiple projects under tight deadlines
• Comfortable with ambiguity and adaptable to fast changing environments
• Strong communication skills, both written and verbal, with the ability to convey complex security concepts to technical and non-technical audiences

Desirable

• Twilio is currently seeking a proficient Security Engineer to be an integral part of our dynamic Threat and Vulnerability Management team
• This role is pivotal in reducing risks for both Twilio and its clients by efficiently managing vulnerabilities within our systems and products
• The ideal candidate for this role should be an exceptional individual contributor, embodying the Twilio Magic
• And possessing deep expertise in managing security vulnerabilities
• This candidate will have the opportunity to work across the enterprise, collaborating with all business units, including Business information Security Officers (BISOs), Threat Detection & Response, Threat Intelligence, Security Architects, and Security Engineers, among others
• Their role will be to help identify threats and vulnerabilities, prioritize and analyze them, and assist in reporting and supporting remediation efforts
• Reporting to the Head of Threat and Vulnerability Management, this position is crucial in maintaining and communicating Twilio’s risk posture to the management team
• Manage Vulnerability Management infrastructure in our production environment for commercial & government Slack environments
• Leverage vulnerability scanning tools to perform vulnerability management scans on a regular cadence
• Perform analysis of scan results and determine criticality ratings for vulnerabilities impacting all production environments
• As vulnerabilities are surfaced through penetration tests, news, and other reporting, map findings to Twilio’s environment to determine risk and outcomes
• Collaborate with key stakeholders on remediation strategies, provide guidance, and follow through closure
• Report on and track all open vulnerabilities and key metrics around time to completion
• Identify potential for and implement automation between scanning and reporting tools