Night Shift Lead - Incident Response & Forensics

ouryahoo; United States; Hybride; USD 128 000 - 267 000; Plein temps

Avantages offerts par ce poste

Flexible hybrid work

Healthcare benefits

401(k)

Résumé du poste

Yahoo is seeking a senior SOC/Incident Response Analyst to protect data and systems across the enterprise. You will lead investigations, hunt threats, and collaborate with engineering to automate detections using AI-powered playbooks.

You will work in a flexible hybrid model, supporting critical incidents and proactive defense 5 days a week with on-call rotations. Strong communication and cross-team coordination are essential.

Qualifications

• 5+ years of experience as a SOC/Incident Response Analyst with a track record of complex investigations.
• In-depth experience with macOS and Linux systems, services, and security architectures.
• Strong background in security fundamentals including network/host forensics, log analysis, and malware triage.
• Experience leading shifts or projects within a security operations environment.
• Proficiency communicating complex findings to non-technical stakeholders.

Responsabilités

• Act as shift lead and resource for colleagues during multifaceted investigations.
• Perform threat hunting using Databricks and AI models to identify anomalies at Internet scale.
• Develop and deliver tabletop exercises and participate in threat hunting drills.
• Assess high-priority incidents and drive remediation across Yahoo business units.
• Tune detection signatures with engineering teams and develop AI-augmented playbooks.
• Evaluate new log sources for security value and automate repetitive IR tasks.
• Participate in a 24x7 on-call rotation for critical escalations.

Connaissances

SOC/IR

macOS

Linux

Forensics

Threat Hunting

Scripting

AI tooling

Outils

SIEM

Databricks

Telemetry platforms

EDR

Description du poste

Yahoo is seeking a senior SOC/Incident Response Analyst to protect data and systems across the enterprise. You will lead investigations, hunt threats, and collaborate with engineering to automate detections using AI-powered playbooks.

You will work in a flexible hybrid model, supporting critical incidents and proactive defense 5 days a week with on-call rotations. Strong communication and cross-team coordination are essential.