Night Shift Incident Response & Forensics Lead

110 Yahoo Holdings Inc.; United States; Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Healthcare

401(k)

Backup childcare

Education stipends

Job summary

Yahoo seeks a senior security professional for incident response and digital forensics, capable of leading shifts, performing threat hunting at internet scale, and driving remediation across business units. The role emphasizes automation, collaboration with engineering, and AI-assisted playbooks.

Strong background in macOS/Linux, MITRE ATT&CK, and rapid communication with stakeholders is required. Flexible hybrid work options are offered, with 24x7 on-call support as needed.

Qualifications

• 5+ years of experience as a SOC/Incident Response Analyst.
• In-depth experience with macOS and Linux systems, services, and security architectures.
• Strong background in security fundamentals, including network/host forensics, log analysis, and malware triage.
• Knowledge and experience acting as a shift lead or project lead within a security operations environment.
• A passion for the field of information security and incident response.
• Deep understanding of common network services, vulnerabilities, and modern attack patterns (MITRE ATT&CK).
• Excellent written and verbal communication skills, with the ability to communicate complex technical findings to non-technical stakeholders.
• Experience using AI assistants or LLMs (e.g., Gemini) for script generation, code review, or complex technical documentation.

Responsibilities

• Act as a shift lead and resource for colleagues, guiding them through multifaceted work problems and complex investigations.
• Perform proactive research and threat hunting, utilizing Databricks and the help of AI models to identify subtle security anomalies at Internet scale.
• Work with the team to develop and deliver table top exercises.
• Participate in regular threat hunting exercises.
• Assess high-priority security incidents and drive remediation efforts across Yahoo business units.
• Work with a variety of security technologies including IDS, firewalls, EDR, etc.
• Contribute to the overall security posture of Yahoo.
• Partner with engineering teams to tune detection signatures and develop AI-augmented playbooks for faster "badness" identification.
• Evaluate new log sources for security detection value and develop potential use cases.
• Continue to focus on process improvement, specifically automating repetitive IR tasks using some of our AI tooling.
• Work on special projects as needed.
• Participate in a 24x7 on-call rotation for critical escalations.

Skills

Incident response

Digital forensics

macOS

Linux

Security architectures

MITRE ATT&CK

Communication skills

AI tooling

Tools

SIEM

Shell scripting

Python

AI tooling (Gemini)

Job description

Yahoo seeks a senior security professional for incident response and digital forensics, capable of leading shifts, performing threat hunting at internet scale, and driving remediation across business units. The role emphasizes automation, collaboration with engineering, and AI-assisted playbooks.

Strong background in macOS/Linux, MITRE ATT&CK, and rapid communication with stakeholders is required. Flexible hybrid work options are offered, with 24x7 on-call support as needed.