> Markdown version of [/jobs/ext/1348393-senior-manager-security-incident-response](https://www.wearedevelopers.com/jobs/ext/1348393-senior-manager-security-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Manager, Security Incident Response - **Company:** Amazon.com, Inc. - **Location:** Seattle, WA, United States - **Experience:** Expert - **Salary:** $175,100.0 - $236,900.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Perl (Programming Language), Internet Communications, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Ruby, Scripting, Software Security, Cyber Threat Analysis, Cybercrime - **Published:** July 19, 2026 - **Apply:** https://www.juju.com/job/00000000ghww4t ## About the Role Experience scripting for automation (e.g., Python, Perl, Ruby) - You have 5+ years managing a team of incident handlers and security engineers, or 2 years of management experience with at least 3 years of hands-on security incident response work - You have delivered security programs like network security monitoring, cloud security monitoring, incident response, threat hunting, or other reactive information security programs - Your approach to incident response is collaborative, not combative - You have in-depth knowledge of internet security issues and the threat landscape - You have a background in cloud, host, network, and application security Preferred Qualifications - Experience managing and mitigating high impact security risks on a global platform - Familiarity with Twitch ## Description As the SIRT Manager, you will lead Twitch's Security Incident Response Team, reporting to the VP of Security. You'll oversee a team responsible for detecting and handling security incidents, and be an advocate for lessons learned from incidents across Twitch. You bring expertise in threat intelligence, detection engineering, and incident response. Your team will work directly with affected teams to contain and learn from incidents. We encourage you to apply if you have a combination of the skills outlined below. You can work from San Francisco, CA; Irvine, CA or Seattle, WA! You Will - As SIRT Manager, you will initially participate in, and graduate to escalation for, an on-call rotation of your direct reports on the Incident Response Team - You will identify opportunities for automation to enhance your team's efficiency - You will qualify reports or alerts of activity as security incidents using clear guidelines that establish what constitutes a security incident - You will evaluate the potential and realized impact of security incidents to Twitch - You will communicate security incident details, impact assessments, and response actions to leadership and executive partners - You will foster a culture of learning and knowledge sharing within your team and across the organization, Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company's reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson) - [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)