Senior Container Security Engineer - Cloud and On-Prem

Yahoo Holdings Inc.; Mountain View (CA); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work options

Job summary

Yahoo Holdings Inc. is seeking a hands-on container security engineer to strengthen our security program across cloud and on-prem environments.

You will partner with platform and product teams to prioritize and deliver container security improvements, translate findings into actionable fixes, and advance our multi-year container security roadmap. You will operate image scanning, baseline enforcement, and secure-by-default pipelines, while building AI-assisted workflows to automate vulnerability

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years of information security experience with at least 3 years in container security, cloud security engineering, or DevSecOps.
• Hands-on experience operating container vulnerability scanning and SBOM tooling in CI/CD environments.
• GCP experience securing GKE and Cloud Run, Artifact Registry, and Security Command Center findings.
• On-premises Linux, Windows, and Baremetal hardening experience with container runtimes.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices based on industry standards.
• Build detections to enforce baselines and route findings to owner teams.
• Create secure-by-default paved roads and curated base images for container workloads.
• Secure container workloads on GCP, AWS, and on-premises infrastructure.

Skills

Container security

CI/CD tooling

GCP security

AWS security

Kubernetes security

RBAC and pod security

Python and SQL

AI-assisted security workflows

Education

Bachelor's degree in a technical discipline

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

Job description

Yahoo Holdings Inc. is seeking a hands-on container security engineer to strengthen our security program across cloud and on-prem environments.

You will partner with platform and product teams to prioritize and deliver container security improvements, translate findings into actionable fixes, and advance our multi-year container security roadmap. You will operate image scanning, baseline enforcement, and secure-by-default pipelines, while building AI-assisted workflows to automate vulnerability