Senior Security Engineer

About Us

Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It is where thousands of communities come together for whatever, every day.

We’re about community, inside and out. You’ll find coworkers who are eager to team up, collaborate, and smash (or elegantly solve) problems together. We’re on a quest to empower live communities, so if this sounds good to you, see what we’re up to on LinkedIn and X,  and discover the projects we’re solving on our Blog. Be sure to explore our Interviewing Guide to learn how to ace our interview process.

About the Role

Twitch Security helps engineering teams across the company build and operate services for our customers and employees safely. As a Senior Security Engineer, you will report to the Head of Product Security and help secure our services throughout the software development lifecycle. This technical role leverages both application and infrastructure security knowledge. You will partner with our service teams to implement secure defaults, identify security issues, and implement security fixes and improvements. Additionally, you will partner with other Twitch Security teams, and senior leaders across Twitch and Amazon to identify opportunities to collaborate towards our security strategy.

Does that sound like you, or like someone you want to be? Cool. We would like for you to apply. You cannot waste our time. Let us worry about our time. We do not expect expertise in all of our responsibility areas, but we do expect you to be fluent with almost all of them and demonstrate technical expertise in several.

You can work from Twitch’s headquarters in San Francisco, CA; or from one of our hub locations in Seattle, WA; Irvine, CA; Los Angeles, CA or New York City, NY.

You Will:

• Conduct product security assessments across all Twitch services, and help establish secure defaults. Advocate for secure outcomes in design, architecture, and development
• Own identification of ambiguous security issues across all of Twitch, scale mitigations using Amazon/Twitch tools and security frameworks
• Collaborate with peer security teams to influence and scale security efforts earlier in the software development lifecycle
• Perform reviews throughout the product and infrastructure development lifecycle, including but not limited to: design review, threat modeling, attack surface identification, vulnerability assessment and remediation
• Work on strategic security programs to engage on large security anti-patterns
• Play co-op and help grow security engineers across the company. Bring new ideas emerging throughout the information security field

You Have:

• 5+ years of experience in application and infrastructure security, including exposure to cloud security within AWS and GCP infrastructure
• Proficiency in understanding Go code, or other languages that support object oriented programming principles such as C++/C#, Python, and JavaScript
• Demonstrated ability to automate security tooling and integrate security checks into development workflows
• Experience driving security outcomes in large company wide programs
• Knowledge of microservices architecture, inter-service call authorization, and experience reviewing them with a security perspective
• Diverse interest and understanding in cloud, application, and infrastructure security topics

Bonus Points

• Extensive knowledge of AWS platforms and services
• Extensive knowledge of internet security issues and threat landscape that focus on live streaming and video delivery services
• Independent program management and strategy establishment capability

Perks

• Medical, Dental, Vision & Disability Insurance
• 401(k)
• Maternity & Parental Leave
• Flexible PTO
• Amazon Employee Discount 

Job ID: TW8837

Twitch is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Twitch values your privacy. Please consult our Candidate Privacy Notice, for information about how we collect, use, and disclose personal information of our candidates.