Night Shift Lead, Forensics & Incident Response

Yahoo; United States; Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Hybrid work options

Job summary

Yahoo is seeking a senior SOC/IR professional to join The Paranoids FIRE team. You will lead complex investigations during the weekday night shift, protect corporate and user data, and mentor junior analysts using AI-augmented tools and telemetry.

Ideal candidates have 5+ years in security operations, strong macOS/Linux forensics experience, and a solid grasp of MITRE ATT&CK. The role emphasizes automation, collaboration with engineering, and a commitment to high-quality incident response.

Qualifications

• 5+ years of experience as a SOC/Incident Response Analyst.
• In-depth experience with macOS and Linux systems and security architectures.
• Strong background in forensics, log analysis, and malware triage.
• Experience as shift lead or project lead in security operations.
• Excellent communication skills for non-technical stakeholders.
• Familiarity with MITRE ATT&CK framework.
• Experience using AI assistants or LLMs for scripting or documentation.

Responsibilities

• Act as a shift lead and resource for colleagues.
• Perform threat hunting using Databricks and AI models.
• Develop and deliver table-top exercises.
• Participate in regular threat hunting exercises.
• Assess high-priority incidents and drive remediation across Yahoo units.
• Work with IDS, firewalls, EDR, and related security technologies.
• Tune detection signatures with engineering and develop AI-augmented playbooks.
• Evaluate new log sources for detection value.
• Automate repetitive IR tasks with AI tooling.
• Participate in 24x7 on-call rotation.

Skills

SOC experience

Communication skills

Leadership

MITRE ATT&CK

AI tooling

MacOS/Linux

Tools

SIEM

Telemetry platforms

Python

Job description

Yahoo is seeking a senior SOC/IR professional to join The Paranoids FIRE team. You will lead complex investigations during the weekday night shift, protect corporate and user data, and mentor junior analysts using AI-augmented tools and telemetry.

Ideal candidates have 5+ years in security operations, strong macOS/Linux forensics experience, and a solid grasp of MITRE ATT&CK. The role emphasizes automation, collaboration with engineering, and a commitment to high-quality incident response.