Paranoids, Weekend Night Shift - Forensic and Incident Response Operations (FIRE) Analyst

Yahoo Holdings Inc. in; Baltimore (MD); Hybrid; USD 89,000 - 184,000; Full time

Benefits offered by this job

Healthcare

401(k)

Backup childcare

Education stipends

Job summary

Yahoo Holdings Inc. is seeking an inquisitive security analyst to join the weekend night shift (Fri–Sun, 9 PM–9 AM EST).

You will monitor security events across networks, endpoints, and cloud data stores, using AI-assisted tools to accelerate investigations and draft incident timelines. You will assess incidents, perform initial containment, and coordinate remediation with business units while exploring AI-driven efficiencies and new alerting use cases.

Qualifications

• 1–3 years of experience or equivalent practical background in security fundamentals, including network/host forensics, log analysis, and basic malware triage.
• Demonstrated interest in and commitment to information security and incident response.
• Working understanding of common network services, protocols, vulnerabilities, and MITRE ATT&CK patterns.
• Hands-on experience navigating Windows, macOS, and Linux OS logs.
• Familiarity with AI productivity tools or AI coding assistants.

Responsibilities

• Monitor, triage, and analyze security events from networks, applications, endpoints, and cloud data stores.
• Leverage AI-assisted investigation tools to accelerate log parsing and draft initial incident timelines.
• Assess security incidents, contain and coordinate remediation with business units.
• Identify repetitive tasks and help implement AI-driven efficiencies and automated triage playbooks.
• Assist in tuning detection signatures and developing new alerting use cases.
• Evaluate new log sources for security detection value and contribute to detection engineering under mentorship.
• Critically evaluate AI outputs to prevent hallucinations and false positives.
• Support regular threat hunting exercises and table-top simulations.
• Maintain documentation, runbooks, and shift handoff logs.
• Participate in 24x7 on-call rotations for critical incident response.

Skills

Security fundamentals

Network forensics

Log analysis

Malware triage

Databricks

SIEM platforms

Python

Tools

Databricks

Python

Job description

A Little About Us

It takes powerful technology to connect our brands and partners with an audience of hundreds of millions of people. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world.

A Lot About You

You are an inquisitive, highly motivated security analyst who is available to work the weekend night shift (9 PM EST to 9 AM EST Friday to Sunday). You will use Yahoo internal detection platforms, SIEM technologies, and modern AI-augmented workflows to detect and respond to security events. You are eager to protect sensitive corporate and user data from unauthorized access at Internet scale, bringing continuous curiosity and an open mindset to experimenting with emerging tools and automation to find bad actors and keep Yahoo secure. During your time here we will Give you the opportunity to contribute to key operational processes supporting the mission of finding malicious acitivty Enable you to investigate advanced threats and protect our global user base Provide you with a positive, supportive team environment and healthy work-life balance Encourage you to follow investigations through to full resolution Support your career development through continuous learning in forensic methodologies, threat hunting, and modern security automation.

Responsibilities

• Monitor, triage, and analyze security events from networks, applications, endpoints, and cloud data stores.
• Leverage AI-assisted investigation tools and structured prompts to accelerate log parsing, synthesize alert telemetry, and draft initial incident timelines.
• Assess security incidents, perform initial containment actions, and coordinate with Yahoo business units to remediate operational issues.
• Identify repetitive, manual monitoring tasks and partner with senior engineers to implement AI-driven efficiencies and automated triage playbooks.
• Assist in tuning detection signatures and developing new alerting use cases for identifying malicious activity across internal systems.
• Evaluate new log sources for security detection value and contribute to detection engineering rules under senior analyst mentorship.
• Critically evaluate and validate AI-generated outputs, detection queries, and script suggestions to prevent hallucinations and false positives.
• Collaborate with the team to support regular threat hunting exercises and table-top simulation scenarios.
• Maintain accurate documentation, incident response runbooks, and shift handoff logs.
• Participate in a scheduled 24x7 on-call rotation as required for critical incident response escalations.

Basic Qualifications

• 1–3 years of experience or equivalent practical background in security fundamentals, including network/host forensics, log analysis, and basic malware triage.
• Demonstrated interest in and commitment to the field of information security and incident response.
• Working understanding of common network services (web, mail, DNS), protocols, network vulnerabilities, and standard adversary attack patterns (MITRE ATT&CK).
• Functional hands‑on experience navigating and analyzing Windows, macOS, and Linux operating systems and system logs.
• Familiarity with using modern AI productivity tools or AI coding assistants (e.g., generating scripts, crafting targeted search queries, or summarizing technical logs).
• Ability to work independently during shift hours and communicate effectively via collaboration platforms.
• Strong written and verbal communication skills, including the ability to communicate technical findings clearly to both engineering and non-technical stakeholders.

Preferred Qualifications

• Experience querying and analyzing telemetry in Databricks or Enterprise Event Monitoring (SIEM) platforms.
• Experience with shell scripting, Python, or automation languages, including experience using AI pair-programming tools to build or optimize automation scripts.
• Familiarity with modern Endpoint Detection & Response (EDR), Intrusion Detection Systems (IDS), and cloud logging services.
• Demonstrated curiosity in experimenting with emerging AI security capabilities and integrating workflow automations into daily operations.

The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies; exercising sound judgment; working effectively, safely and inclusively with others; exhibiting trustworthiness and meeting expectations; and safeguarding business operations and brand integrity.

At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter! Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response. We believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.

The compensation for this position ranges from $88,500.00 - $184,375.00/yr and will vary depending on factors such as your location, skills and experience. The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.

Currently work for Yahoo? Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products.

For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.