Senior Container Security Engineer – Cloud & On-Prem

Yahoo Holdings Inc.; Nashville (TN); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work options

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo is seeking a hands-on Cyber Resilience engineer focused on container security to secure workloads across cloud and on‑prem environments. You will turn findings into fixes, drive baselines, and collaborate with platform teams to prioritize security work and maintain momentum.

You will work on actionable security initiatives, build secure pipelines, and help mature the container security program with a multi‑year roadmap.

Qualifications

• Bachelor's degree in a technical discipline or equivalent experience.
• 5+ years in information security with at least 3 years in container security, cloud security engineering, or DevSecOps.
• Hands-on experience operating container vulnerability scanning in CI/CD such as Grype, Syft, Trivy, Anchore, or Snyk Container; including CVE triage and SBOM formats.
• GCP container security expertise, including securing GKE clusters, Cloud Run, Artifact Registry, and Security Command Center findings.
• On‑premises host hardening and Linux/Windows distributions; container runtimes on bare metal; kernel isolation features.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices based on industry standards.
• Build detections to enforce baselines and route findings to the teams that own workloads.
• Create secure‑by‑default paved roads for container teams and guardrails.
• Secure container workloads on GCP and AWS and on‑premises hosts.
• AI‑augmented automation for vulnerability triage and policy updates.
• Report on container fleet risk posture, remediation progress, and program metrics.

Skills

Container security

Cloud security

DevSecOps

CI/CD tooling

SBOM tooling

Vulnerability scanning

GCP

AWS

Kubernetes security

Python

SQL

AI tools

Education

Bachelor's degree in CS/Engineering/InfoSec

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

Kubernetes

GKE

Artifact Registry

Job description

Yahoo is seeking a hands-on Cyber Resilience engineer focused on container security to secure workloads across cloud and on‑prem environments. You will turn findings into fixes, drive baselines, and collaborate with platform teams to prioritize security work and maintain momentum.

You will work on actionable security initiatives, build secure pipelines, and help mature the container security program with a multi‑year roadmap.