Staff Engineer, Insider Risk Program

Join the team as our next  Staff Security Engineer - Insider Risk Program

We are seeking a staff security engineer that will work within the Twilio Threat Detection and Response group [TDR]. The Cyber Insider Risk Investigations Specialist will be responsible for investigating potential risks against Twilio and its workforce from internal and external actors. This is a technical role that supports technical incidents. 

Responsibilities

In this role, you’ll:

• Collaborating and acting as a liaison between Insider risk analysts and End users, Legal, HR, other stakeholders to address findings. 
• Assess and investigate complex insider risk incidents and digital behaviours of concern, providing a thorough and mature investigative process from start to end.
• Demonstrate an expert level of business acumen and employment legal considerations throughout the investigations.
• Conduct sensitive interviews of persons of interest during insider risk investigations.
• Examine the case summary provided by the Insider risk analysts and evaluate the appropriate course of action to mitigate the identified security concern within daily operations and incident reviews.
• Document investigative results in an articulate manner to ensure accurate reporting, tracking and documentation of incidents and behaviors of concern through the entire lifecycle of the incident. 
• Produce high quality investigative reports, assessments and briefings for senior management and stakeholders. 
• Convey complex security issues to both technical and non-technical audiences with clarity and impact. 
• Collaborate closely with the Insider Risk Program Manager and cross-functional partners, including Employee Relations, Employment Legal, and HR, to develop and formalize comprehensive runbooks and standard operating procedures that proactively address and mitigate insider risk.
• Capable of undertaking analytical and project tasks to support the team as needed.

Qualifications 

Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• 6+ years of hands-on cyber security investigations experience in law enforcement, counterintelligence, or private sector industry equivalent. 
• Experience with emerging cloud technology services and their effect on digital investigations.
• Experience interviewing cyber risk actors in particular Insider risk actors and impacted individuals.
• Knowledge of Insider risk/Data Loss Prevention programs, incident management and investigative programs.
• Experience with cyber security tools, UEBA/DLP/SIEM/SOAR is a plus. 
• Basic scripting and coding skills (Powershell, VBscript, Bash, Python, SQL, etc..)
• Excellent written and verbal communication skills.
• Ability to influence and build effective working relationships with all levels of the organization.
• Flexible to work additional hours during incidents and provide team support as needed

Location:

This role will be in-office or remote. Canada 

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

The estimated pay ranges for this role are as follows:

• Based in British Columbia. : CAD $118,200.00 - CAD$ 147,700.00 

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.