Night-Shift Incident Response & Forensics Analyst

Yahoo Holdings Inc.; Reston (VA); Hybrid; USD 89,000 - 184,000; Full time

Benefits offered by this job

Flexible hybrid work

Job summary

Yahoo Holdings Inc. is seeking a security analyst for the weekend night shift (9 PM EST to 9 AM EST, Friday to Sunday). You will monitor security events, use AI-assisted tools, and coordinate containment with Yahoo business units to protect data at Internet scale.

The role emphasizes threat hunting, automation, and maintaining runbooks, with a flexible hybrid work model and support for career development in forensic methodologies.

Qualifications

• 1–3 years of experience or equivalent practical background in security fundamentals.
• Experience with network/host forensics, log analysis, and malware triage.
• Interest and commitment to information security and incident response.

Responsibilities

• Monitor, triage, and analyze security events from networks, applications, endpoints, and cloud data stores.
• Leverage AI-assisted investigation tools to accelerate log parsing and draft incident timelines.
• Contain incidents and coordinate remediation with Yahoo units.
• Identify repetitive tasks and help implement AI-driven efficiencies and playbooks.
• Tune detection signatures and develop new alerting use cases.
• Evaluate log sources for detection value and contribute to detection engineering.
• Critically review AI outputs to prevent false positives.
• Support threat hunting exercises and table-top simulations.
• Maintain incident response runbooks and handoff logs.
• Participate in 24x7 on-call rotation for critical incidents.

Skills

Security fundamentals

Forensics (network/host)

Log analysis

Malware triage

Tools

Databricks

SIEM platforms

Job description

Yahoo Holdings Inc. is seeking a security analyst for the weekend night shift (9 PM EST to 9 AM EST, Friday to Sunday). You will monitor security events, use AI-assisted tools, and coordinate containment with Yahoo business units to protect data at Internet scale.

The role emphasizes threat hunting, automation, and maintaining runbooks, with a flexible hybrid work model and support for career development in forensic methodologies.