See yourself at Twilio

Join the team as Twilio’s next Security Engineer, Security Automation on Twilio’s Information Security Team.

About the job

This position is needed to assist Twilio’s Information Security Team operate more efficiently by improving and automating our critical security workflows.

As a Software Engineer, Security Automation on this team, you will participate in all phases of the software development life cycle which includes requirements gathering with security teams, technical design, estimations, sprint planning, coding, testing, deployments and on-call support. You will own, operate and maintain automated workflows that support various security programs including but not limited to cloud security, product security, Governance, Risk & Compliance (GRC)  and enterprise security, employing Agile methodologies to continuously deliver value to our partners.

Responsibilities

In this role, you’ll:

• Develop and implement automated and AI-powered security solutions to protect Twilio's Cloud and Enterprise infrastructure, leveraging data orchestration frameworks and LLM-based approaches.
• Build workflows that integrate structured and unstructured data sources into orchestrated pipelines, enabling intelligent decision-making and risk reduction at scale.
• Design and prototype LLM-driven applications to automate security analysis, incident response, and governance tasks, while ensuring explainability and accuracy.
• Collaborate with cross-functional teams to identify security needs and deliver advanced AI-enabled solutions that address those needs effectively.
• Contribute significantly to defining our security automation and AI roadmap, balancing near-term and long-term business impact with technical feasibility and scalability.
• Own and maintain the operational health of automation and AI-driven systems, ensuring they continue to meet reliability and performance requirements (SLOs and KPIs).
• Support on-call operations for tools, pipelines, and AI models owned by the team.
• Document and share knowledge through clear technical documentation of processes, procedures, AI models, and orchestration systems.
• Stay up-to-date on emerging trends in security automation, data orchestration, and AI/LLMs—and apply them to Twilio’s security operations for continuous innovation.

Qualifications 

Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• Minimum of five (5) years of experience as a software engineer developing internal tools and automating workflows at scale
• Proficiency in Python (or another scripting language) for development, testing, and automation of security and infrastructure workflows
• Hands-on experience applying AI/ML models, including LLMs, to automate complex business or security processes and build intelligent solutions
• Solid understanding of software security principles, secure coding practices, and security automation
• Experience with data orchestration frameworks (e.g., Airflow, Dagster, Prefect) to manage and scale automation pipelines
• Familiarity with infrastructure-as-code (Terraform), CI/CD systems (BuildKite or similar), and container orchestration platforms (Kubernetes, Docker)
• Strong problem-solving, communication, and collaboration skills, with the ability to iterate quickly on feedback and work across security and engineering teams

Desired:

• Experience with Security Orchestration, Automation, and Response (SOAR) technologies and practices, with a focus on scaling automated incident response
• Proven ability to design and implement security automation frameworks that enable rapid delivery of reliable, reusable, and scalable automated solutions
• Strong interest in or hands-on experience with building and applying AI/ML models (including LLMs) to automate complex workflows in cybersecurity, compliance, or infrastructure operations
• Ability to bridge AI/automation capabilities with security strategy, driving adoption of next-generation solutions across cloud and enterprise environments
• Passion for continuous innovation in leveraging orchestration, automation, and AI to solve real-world security challenges

Location

This role will be remote, and based in the UK.

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

There are many benefits to working at Twilio, including, in addition to competitive pay, things like generous time-off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Security Engineer, Security Automation on Twilio’s Information Security Team.

About the job

This position is needed to assist Twilio’s Information Security Team operate more efficiently by improving and automating our critical security workflows.

As a Software Engineer, Security Automation on this team, you will participate in all phases of the software development life cycle which includes requirements gathering with security teams, technical design, estimations, sprint planning, coding, testing, deployments and on-call support. You will own, operate and maintain automated workflows that support various security programs including but not limited to cloud security, product security, Governance, Risk & Compliance (GRC)  and enterprise security, employing Agile methodologies to continuously deliver value to our partners.

Responsibilities

In this role, you’ll:

• Develop and implement automated and AI-powered security solutions to protect Twilio's Cloud and Enterprise infrastructure, leveraging data orchestration frameworks and LLM-based approaches.
• Build workflows that integrate structured and unstructured data sources into orchestrated pipelines, enabling intelligent decision-making and risk reduction at scale.
• Design and prototype LLM-driven applications to automate security analysis, incident response, and governance tasks, while ensuring explainability and accuracy.
• Collaborate with cross-functional teams to identify security needs and deliver advanced AI-enabled solutions that address those needs effectively.
• Contribute significantly to defining our security automation and AI roadmap, balancing near-term and long-term business impact with technical feasibility and scalability.
• Own and maintain the operational health of automation and AI-driven systems, ensuring they continue to meet reliability and performance requirements (SLOs and KPIs).
• Support on-call operations for tools, pipelines, and AI models owned by the team.
• Document and share knowledge through clear technical documentation of processes, procedures, AI models, and orchestration systems.
• Stay up-to-date on emerging trends in security automation, data orchestration, and AI/LLMs—and apply them to Twilio’s security operations for continuous innovation.

Qualifications 

Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• Minimum of five (5) years of experience as a software engineer developing internal tools and automating workflows at scale
• Proficiency in Python (or another scripting language) for development, testing, and automation of security and infrastructure workflows
• Hands-on experience applying AI/ML models, including LLMs, to automate complex business or security processes and build intelligent solutions
• Solid understanding of software security principles, secure coding practices, and security automation
• Experience with data orchestration frameworks (e.g., Airflow, Dagster, Prefect) to manage and scale automation pipelines
• Familiarity with infrastructure-as-code (Terraform), CI/CD systems (BuildKite or similar), and container orchestration platforms (Kubernetes, Docker)
• Strong problem-solving, communication, and collaboration skills, with the ability to iterate quickly on feedback and work across security and engineering teams

Desired:

• Experience with Security Orchestration, Automation, and Response (SOAR) technologies and practices, with a focus on scaling automated incident response
• Proven ability to design and implement security automation frameworks that enable rapid delivery of reliable, reusable, and scalable automated solutions
• Strong interest in or hands-on experience with building and applying AI/ML models (including LLMs) to automate complex workflows in cybersecurity, compliance, or infrastructure operations
• Ability to bridge AI/automation capabilities with security strategy, driving adoption of next-generation solutions across cloud and enterprise environments
• Passion for continuous innovation in leveraging orchestration, automation, and AI to solve real-world security challenges

Location

This role will be remote, and based in Ireland.

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

There are many benefits to working at Twilio, including, in addition to competitive pay, things like generous time-off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Security Compliance & Regulatory Affairs Analyst 

About the job

We are actively recruiting for this role to support Twilio’s global security regulatory program and directly support the SCRA Lead in executing and scaling the company’s regulatory strategy.

This position is responsible for independently owning delegated components of regulatory analysis, triage, normalization, and operationalization of global cybersecurity and telecom regulatory obligations (e.g., NIS 2, TSA UK, Singapore IMDA), while contributing to broader program-level initiatives led by the SCRA Lead.

The role operates with high autonomy and is expected to take ownership of assigned workstreams end-to-end, requiring strong critical thinking, defensible regulatory interpretation, designing and executing cross-functional initiatives, and the ability to operate without detailed instruction.

Responsibilities

In this role, you’ll:

• Support the SCRA Lead in executing Twilio’s global security regulatory strategy, including contributing to program design, prioritization, and long-term regulatory planning
• Independently interpret complex and ambiguous regulatory frameworks (e.g., NIS 2, EU transpositions, TSA UK) and provide structured outputs that support Lead-level strategy and decision-making
• Support the development and maintenance of regulatory repositories and systems of record, ensuring accuracy, traceability, and audit readiness
• Execute and continuously improve the Cyber Regulation Intake & Triage process in partnership with Legal, ensuring consistent classification, routing, and lifecycle tracking of regulatory obligations
• Map regulatory requirements to internal control frameworks (e.g., UCF, ISO 27001, internal standards), identifying gaps and supporting Lead-driven control strategy decisions
• Develop regulator-ready and high-quality artifacts, including evidence mappings, control narratives, risk statements, and audit support documentation
• Identify, analyze, and escalate regulatory risks and audit obligations, supporting proactive planning and risk visibility at the program level
• Partner cross-functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams, supporting the Lead in aligning regulatory interpretation with technical and business implementation
• Drive execution of process improvements, tooling enhancements, and automation initiatives defined by the SCRA program
• Operate with high ownership and accountability, executing work independently while aligning to strategic direction set by the SCRA Lead

Qualifications 

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

*Required 

• Experience: 5–8+ years of experience in security compliance, telecom compliance, regulatory affairs, GRC, or related domain within a global technology, cloud, or telecom environment
• Experience: Experience interpreting and operationalizing security frameworks and regulations (e.g., NIS 2, ISO 27001, SOC 2, telecom regulatory regimes)
• Experience: Experience mapping regulatory requirements to control frameworks, policies, and technical implementations
• Technical Domain Expertise: Broad understanding of security architecture, networking, access control, software development, cryptography, and operations. You should be fluent in how security controls are implemented across applications, systems, and cloud platforms to reduce inherent risk.
• Technical Domain Expertise: Ability to analyze ambiguous regulations / regulatory requirements and produce defensible interpretations to support leadership decision-making
• Communication: Strong written communication skills with ability to produce audit-ready and regulator-defensible documentation
• Stakeholder Partnership: Proven ability to collaborate across Legal, Engineering, Security, Product, Sales, and Risk teams in support of program objectives
• Strategic Mindset: High level of self-sufficiency, critical thinking, and ownership, with ability to execute without detailed instruction
• Adaptability: Demonstrated ability to independently execute and deliver complex workstreams end-to-end, while operating under high-level guidance
• Adaptability: Ability to manage multiple concurrent priorities in a global, fast-evolving regulatory landscape

*Desired:

• Technical Domain Expertise: Deep understanding of hybrid cloud environments (AWS/GCP), on-premise infrastructure, APIs, and microservices architectures. Experience in the Telecommunications sector (e.g. telecommunications or CPaaS environments involving messaging, voice, network security) highly preferred.
• Familiarity with primary global regulatory regimes (EU, UK, APAC, LATAM)
• Experience working with regulatory repositories, intake/triage workflows, or compliance automation systems
• Experience supporting external audits or regulator engagements
• High-Octane Individual Contributor: You are a self-starter who takes pride in being a "force multiplier." You have a proven ability to produce high-quality, audit-ready deliverables with minimal oversight.
• Master of Multi-Tasking: Exceptional organizational skills with the ability to context-switch effectively, managing a high volume of concurrent projects and emerging regulations without sacrificing depth or accuracy.
• Collaborative Partner: You don't work in a silo. You are skilled at building bridges across Legal, R&D, Security, and IT, ensuring that Security Regulatory Affairs is integrated as a seamless partner
• Efficiency Expert: You are constantly looking for ways to optimize your own output and team processes, turning manual, repetitive tasks into streamlined, automated successes.
• Executive Presence: Ability to distill granular technical findings into concise, high-level summaries that drive decision-making at the leadership level.

Location

This role will be remote and based in Ontario, British Columbia or Alberta, Canada. 

Travel

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location. Based on role, employees may also be eligible for additional compensation and benefits, including but not limited to incentive programs, commissions, equity grants, health and wellness benefits, retirement contributions, and paid time off.

The estimated pay ranges for this role are as follows:

• $120,640 - 150,800 CAD
• Target Bonus Percentage: 15% 

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

See yourself at Twilio

Join the team as Staff Engineer, Offensive Security

About the job

The Staff Engineer acts as a Technical Lead. You don't just find bugs; you design complex attack chains that demonstrate systemic risk. You spend as much time writing custom code and researching new bypasses as you do executing tests.

Responsibilities

In this role, you will:

• Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android).
• Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
• Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
• AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs).
• Technical Reporting: Draft high-quality reports that detail the "path to compromise" with clear, reproducible steps for developers.
• Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners).
• Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR.
• Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities.
• Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth.
• AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage.
• Cloud & Infrastructure Attacks: Execute sophisticated attacks against AWS/Azure/K8s, focusing on IAM misconfigurations and container escapes.
• Purple Teaming: Collaborate with SIRT and Detection Engineering to tune SIEM alerts based on the techniques used during an engagement.
• Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes.

Qualifications

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• Experience: 7-10 years in offensive security, penetration testing, a high-volume bug bounty background, AppSec, or vulnerability exploitation, and track record of finding high/critical vulnerabilities in complex environments using pentesting commercial or custom tools.
• Concepts: Expert Knowledge and  solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs, post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML.
• Tooling: Proficient in OffSec popular tools like Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing or, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
• Scripting and Coding: Ability to write functional scripts in Python or Bash to automate repetitive testing tasks and proficiency in coding and scripting like Python, C++, and scripting for creating custom offensive exploits that avoids signature-based detection.
• Certifications: Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar training in OffSec tracks is highly desirable

Desired:

• Telecom expertise is preferred
• Excellent written and verbal communication skills.
• Ability to influence and build effective working relationships with all levels of the organization.
• Proficiency in multiple languages applicable to the region.

Location

This role will be Remote, and based in Ireland

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, approximately 15% travel is anticipated to help you connect in-person in a meaningful way.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Senior Offensive Security Engineer

About the job

This position is needed to The Senior OffSec Engineer will be responsible for the day-to-day execution of penetration tests and contributing to larger Red Team campaigns. You move beyond simple scanning to manual exploitation and are beginning to automate your workflows.  

Responsibilities

In this role, you’ll:

• Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android).
• Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
• Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
• AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs).
• Technical Reporting: Draft high-quality reports that detail the "path to compromise" with clear, reproducible steps for developers.
• Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners).
• Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR.
• Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities.
• Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth.
• AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage.
• Cloud & Infrastructure Attacks: Execute sophisticated attacks against AWS/Azure/K8s, focusing on IAM misconfigurations and container escapes.
• Purple Teaming: Collaborate with SIRT and Detection Engineering to tune SIEM alerts based on the techniques used during an engagement.
• Strategic Bug Bounty Management: Oversee the organization's bug bounty program, identifying trends in submissions to suggest broad architectural security changes.

*Required:

• Experience: 3–5 years in offensive security, penetration testing, or a high-volume bug bounty background and track record of finding high/critical vulnerabilities in complex environments.
• Concepts: Expert Knowledge and  solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs, post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML.
• Tooling: Proficient in Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
• Scripting and Coding: Ability to write functional scripts in Python or Bash to automate repetitive testing tasks and proficiency in Python, C++, and scripting for creating custom offensive tooling that avoids signature-based detection.
• Certifications: Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar
• Telecom expertise is preferred

Location

1. This role will be remote, and based in India. (Karnataka, Tamil Nadu, Telangana, Maharashtra, Delhi)

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Staff Engineer, AI Security.

About the job

As a Staff Engineer, AI Security on the AppSec team, you’ll lead autonomous defense for the AI lifecycle. Build multi-agent frameworks and secure gateways while integrating real-time security gates and identity standards. By mentoring Security and R&D to define the MLSecOps roadmap, you’ll ensure a "secure-by-default" future for agentic workflows and resilient AI innovation.

Responsibilities

In this role, you’ll:

• Serve as the primary subject matter expert for all AI and machine learning security initiatives across security and R&D.
• Design and manage AI gateways to provide a centralized control plane for authentication and authorization and rate limiting across all model and tool interactions.
• Build and maintain an autonomous security agentic framework that utilizes multi agent orchestration for end to end investigation and alert triage and remediation.
• Develop agentic identity models using OAuth 2.1 to propagate identity across trust boundaries and prevent the confused deputy problem.
• Help govern the AI augmented software development lifecycle by integrating real time security gates into the developer environment and CI/CD pipeline.
• Manage Agentic Security Solutions that secure AI lifecycle and manage AI workloads at runtime. 
• Author company wide AI security standards and implement these security checks across Twilio’s stack
• Implement human in the loop checkpoints and transactional safety protocols for high impact or destructive agentic actions.
• Partner with engineering leadership to set the long term roadmap for identity centric security and automated posture management.
• Act as a knowledge multiplier by mentoring security engineers and developing secure by default paved road templates for R&D teams 

Qualifications 

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• 8+ years of experience in security engineering with at least 3 years focused on AI or machine learning security operations (MLSecOps).
• Expertise in orchestrating multi-agent systems with AWS Strands, LangGraph, and CrewAI, specializing in runtime isolation, PII redaction, and defending against indirect prompt injection in agentic environments.
• Hands-on experience with AI-specific frameworks (e.g., MITRE ATLAS, MAESTRO, OWASP Top 10 for LLMs/Agents/MCP) to threat model and defend against a wide spectrum of risks, including direct/indirect prompt injection, training data poisoning, tool poisoning, and data exfiltration within agentic workflows.
• Proficiency in securing end-to-end AI pipelines, from data ingestion and training to model deployment and monitoring.
• Strong communication skills to translate complex AI risks into actionable business logic for stakeholders. 

Desired:

• Hands-on experience in modern application security tooling including SAST and SCA and DAST with experience adapting these tools to catch AI specific vulnerabilities like indirect prompt injection. 
• Expertise in identity standards including OAuth 2.1 and PKCE.
• Experience with AI Red Teaming and conducting adversarial simulations against Large Language Models (LLMs) and agentic systems.
• Proficiency in at least one general programming language (Python, Go, etc) with experience in container security and workload isolation.
• Proven ability to operate with autonomy and drive high impact outcomes in ambiguous environments by identifying and executing on critical projects without predefined roadmaps or direct supervision.

Location

 This role will be remote based in Ireland 

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s next Staff Enterprise Security Engineer (AI Security)

About the job

As a Staff Enterprise Security Engineer, you will be a technical leader within the EntSec team, responsible for the foundational security posture of our organization. You will serve as an SME on the technical strategy and engineering execution for securing the AI ecosystem in our Enterprise, moving beyond policy into building the foundational "decision infrastructure" and technical guardrails that allow the enterprise to innovate with AI at scale.

You will also guide strategic direction and collaboration across enterprise security domains. You will need a background in security engineering and the cross-functional influence necessary to solve ambiguous, large-scale problems. Leveraging expertise in security assessments,  threat modeling, identity and access control principles, and data protection, you will architect and build preventative guardrails and mitigate new risks introduced by first and third-party AI agents in our Enterprise.

Responsibilities

In this role, you’ll:

• Design and implement secure reference architectures for Enterprise AI platforms that secures every Twilion’s engagement with them, ensuring data integrity, regulatory compliance, and resilience against evolving AI threats.
• Establish a definitive framework for AI vetting, driving the cultural and policy shifts needed to institutionalize this strategic mindset across the organization.
• Collaborate with cross functional partners to develop and set the long term roadmap for agentic AI identity and posture management, ensuring cohesive strategies for reducing risk from agentic AI use.
• Maintain and improve our enterprise security posture through high-quality code (Python, Go, or similar) and automated infrastructure management via IAC.
• Act as a technical mentor to junior engineers and a strategic advisor to leadership on the evolving AI landscape.

Qualifications 

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• 7+ years of experience in security engineering or infrastructure security
• 2+ years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
• Expertise in cloud security (AWS, GCP) and container security (Kubernetes).
• Proven track record of designing and deploying complex security systems at scale.
• Strong proficiency in programming languages such as Python, Go, or Java.

Desired:

• Experience in building, deploying and reviewing automation for complex security workflows, including use of both AI-driven and traditional automation tools.
• Excellent communication skills with the ability to explain complex AI security risks to non-technical stakeholders.

Location

 This role will be remote, and based in Ireland

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

See yourself at Twilio

Join the team as Twilio’s Android Engineer for Identity & Security Products, where you'll shape the future of our authentication, verification, and identity applications that protect millions of users globally.

About the job

As an Android engineer on the Twilio Identity and Security team, you will play a significant role in designing and building our Identity solution which is in its early stages of development.  You will be responsible for the end-to-end development cycle, taking ideas from concept to delivery while ensuring our offerings are innovative, robust, and secure. We’re investing in exceptional technical talent like you to accelerate innovation and drive meaningful customer impact in an increasingly complex security landscape.

We're seeking a senior Android engineer who will work closely with their team and collaborate with Product Managers and teams developing our Identity and Security APIs, while also making a broader impact across the organization. We’re looking for someone who thrives both as a team player and when working independently, and who is eager to take on new challenges beyond their comfort zone. You will excel in this role if you enjoy solving complex technical challenges, have a strong interest in advancing solutions within the identity and security domain and are passionate about building high-performing, secure applications.

Responsibilities

In this role, you’ll:

• Drive technical excellence by designing, implementing, and optimizing highly scalable distributed applications that power Twilio's Identity and Security products
• Collaborate with cross-functional teams including product, design, and infrastructure to deliver customer-focused solutions.
• Improve the reliability, scalability, and efficiency of Twilio's Identity and Security’s systems.
• Drive best practices in software engineering, including code reviews, testing, and deployment processes.
• Develop for other developers: As part of our Identity and Security team, you will be implementing SDKs and libraries that will be used and loved by developers all over the world.
• Contribute to architectural discussions and technical roadmaps
• Drive operational excellence by prioritizing observability, reliability, security and performance in all deliverables.
• Mentor junior engineers, fostering a culture of technical excellence, ownership, and continuous learning

Qualifications 

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

*Required:

• 4+ years of Android professional with experience in writing production level mobile applications and customer facing SDKs
• Fluent in Kotlin, with experience in Java
• Knowledgeable of the Android development ecosystem, frameworks, 3rd party libraries
• Experience in the full mobile development cycle
• Deep understanding of software engineering best practices, including monitoring, observability, and building maintainable systems
• Experience working with AWS cloud-based infrastructure.
• Champion of automated build and test pipelines and test-driven development 
• Solid verbal and written communication skills: able to communicate effectively with technical and non technical stakeholders
• A healthy ability to manage and resolve conflict - you have the ability to listen, present, and question effectively.
• Bachelor's degree in Computer Science (or equivalent) OR at least 5 years of relevant professional experience with software development lifecycle and processes.

Desired:

• Experience developing for other developers
• CI/CD, Test automation
• iOS development experience
• Experience working in a geographically distributed team.
• Familiarity with modern verification techniques including SMS/voice verification, biometrics, and TOTP

Location

This role will be remote, but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, you may be required to travel occasionally to participate in project or team in-person meetings.

What We Offer
Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

*Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.

The estimated pay ranges for this role are as follows:

• Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $138,700 - $173,400.
• Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $146,800 - $183,600.
• Based in the San Francisco Bay area, California: $163,100 - 203,900.
• This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Applications for this role are intended to be accepted until March 31, 2026, but may change based on business needs. 

See yourself at Twilio

Join the team as Twilio’s next Operator, Global Security Operations Center (GSOC). 

About the job

This position is needed to maintain a broad situational awareness over internal and external physical events that could impact employee safety or pose a threat to business assets or operations across Twilio’s global footprint. GSOC Operators monitor a variety of data sources including internal access control systems, external incident aggregators, travel safety applications, and general open source reporting materials. GSOC Operators serve as the primary contact for employees with physical safety and security questions or concerns. When an incident occurs, the GSOC Operator may dispatch security resources, escalate to crisis management teams, send broad communications to Twilio employees, or execute a mass notification to account for employee safety.

Responsibilities:

In this role, you’ll:

Monitoring and Surveillance

• Utilize various physical security asset monitoring and surveillance systems to detect potential unauthorized access,  suspicious activity, or other security incidents
• Monitor open-source threat intelligence and other internal SaaS tools to maintain situational awareness of persistent or emergency global events with potential or direct impact to operations

Security Operations Support

• Support access control and visitor management processes
• Manage security-related calls for service and provide general guidance to employees, vendors, and guests
• Maintain awareness of business travelers and personnel accessing Twilio facilities
• Partner with local site security teams to escalate and dispatch resources for incident and alarm response
• Review travel requests to elevated risk locations, assist travelers through the approval process, and cross-reference live itineraries with external incidents 

Incident Management 

• Perform the first point of incident intake across a variety of emergencies, including medical emergencies, natural disasters, fire/evacuation, travel disruptions, and security incidents
• Assess and triage events and incidents to determine their impact to operations
• Dispatch and coordinate response with emergency response personnel 
• Communicate effectively on emerging incidents to large audiences to share situational awareness or tactical updates as warranted
• Maintain real-time incident documentation for reporting and analysis
• Perform Life-Safety checks for Twilio in areas impacted by potentially life-threatening conditions
• Participate in post-incident reviews to document and implement corrective action and improvements to future response

Operational Excellence

• Maintain a strong understanding of security and emergency standard operating procedures
• Utilize critical thinking and problem solving skills to analyse situations and implement solutions
• Support large projects that will improve Twilio’s GSOC capabilities and initiatives 

Qualifications 

Twilio values diverse experiences from all kinds of industries, and we encourage everyone who meets the required qualifications to apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

*Required:

• 3+ years of experience in a GSOC working environment
• Experience with physical safety and security technology, systems (ACS, IDS, VSS, VMS), travel safety, and mass notification tools
• Experience with open-source intelligence (OSINT) research tools 
• Strong critical thinking and problem-solving skills
• Proven ability to follow standard operating procedures and playbooks
• Ability to prioritize tasks in a fast-paced environment
• Ability to stay calm, professional, and think clearly in high-stress situations
• Ability to communicate clearly and concisely; verbal and written
• Ability to work ‘non-standard’ shift hours, to overlap as needed with colleagues and stakeholders in other global locations, including weekend and holiday hours
• English Language Proficiency

Desired:

• Customer service mindset
• Comfortable with a high-tech work environment 
• Eager to learn new tools and processes
• Ability to work independently and as part of a team
• Proficiency in Google Suite
• Additional Language Proficiency

Shift Details:
Variable (8–10-hour shifts)

Must be flexible to work holidays, weekends, and occasional overtime.

Location

This role will be remote, but is not eligible to be hired in CA, CT, NJ, NY, PA, WA.

Travel 

We prioritize connection and opportunities to build relationships with our customers and each other. For this role, approximately 10% travel is anticipated to help you participate in project or team in-person meetings to help you connect in a meaningful way.

What We Offer

Working at Twilio offers many benefits, including competitive pay, generous time off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.

Compensation

*Please note this role is open to candidates outside of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Washington D.C., and Washington State. The information below is provided for candidates hired in those locations only.

The estimated pay ranges for this role are as follows:

• Based in Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, Vermont or Washington D.C. : $26.27 - $32.84
• Based in New York, New Jersey, Washington State, or California (outside of the San Francisco Bay area): $27.77 - $34.71
• Based in the San Francisco Bay area, California: $30.85 - $38.56
• This role may be eligible to participate in Twilio’s equity plan and corporate bonus plan. All roles are generally eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Applications for this role are intended to be accepted until May 15 but may change based on business needs.