I would imagine nobody takes Twitter security seriously (quite evidently including themselves) which probably creates recruiting impediment. If Jack feels he needs some gravitas to attract a good team, hiring Mudge isn't a bad idea. (Might also provide some legitimacy to an off-menu Twitter threat intel product as well.)

There's probably a little bit of housekeeping for infrastructure and operations security. I imagine all of the fun stuff is customer-facing.