Senior Container Security Engineer - Cloud & On-Prem

Yahoo Holdings Inc.; Baltimore (MD); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo is seeking a hands-on container security engineer to join The Paranoids, focusing on securing container workloads across GCP, AWS, and on‑prem environments. You will collaborate with platform engineers to turn findings into fixes that balance security with developer velocity.

Responsibilities include operating image scanning, building baselines, and developing policy guardrails, while driving adoption and practical security improvements across the organization.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years in information security with at least 3 years focused on container security, cloud security engineering, or DevSecOps.
• Hands-on experience operating container vulnerability scanning and SBOM tooling in CI/CD, including CVE triage and SBOM formats (SPDX/CycloneDX).
• GCP container security expertise, including securing GKE clusters and Cloud Run; experience with Artifact Registry and Security Command Center.
• On-premises host hardening and container runtime security knowledge (Linux, Windows, Docker, containerd).

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices based on industry standards.
• Build detections to enforce container security baselines and route findings to owning teams.
• Create secure-by-default paved roads for container teams with hardened base images and policy-as-code guardrails.
• Secure container workloads on GCP (GKE, Cloud Run) and AWS (EKS, ECS/Fargate, ECR) and on‑prem hosts.
• AI-Augmented Automation: develop and refine AI-assisted security workflows to automate vulnerability triage and policy updates.
• Review AI-generated policy changes before production to avoid blocking legitimate builds.
• Report container fleet risk posture and program metrics to security leadership.

Skills

Container security

Cloud security

DevSecOps

SBOM tooling

GCP security

AWS security

Kubernetes security

Python

SQL

AI automation

Education

Bachelor's degree in a technical discipline

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

Docker

Kubernetes

Security Command Center

Job description

Yahoo is seeking a hands-on container security engineer to join The Paranoids, focusing on securing container workloads across GCP, AWS, and on‑prem environments. You will collaborate with platform engineers to turn findings into fixes that balance security with developer velocity.

Responsibilities include operating image scanning, building baselines, and developing policy guardrails, while driving adoption and practical security improvements across the organization.