Senior Container Security Engineer - Cloud & On-Prem

110 Yahoo Holdings Inc.; United States; Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Backup childcare

Education stipends

Job summary

Yahoo is seeking a hands-on security engineer focusing on container security across cloud and on‑prem environments. You will help secure container workloads, translate findings into fixes for engineering teams, and mature the program with strong collaboration across platform and product teams.

You will work with GCP (GKE, Cloud Run) and AWS (EKS, ECS/Fargate) environments, build secure baselines, and leverage AI-assisted workflows to accelerate vulnerability triage and policy updates.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years of information security experience, with 3+ years in container security, cloud security engineering, or DevSecOps.
• Hands-on with container vulnerability scanning and SBOM tooling in CI/CD (Grype, Syft, Trivy, Anchore, Snyk Container) including CVE triage and SBOM formats like SPDX/CycloneDX.
• GCP container security expertise with GKE, Cloud Run, Artifact Registry, and Security Command Center.
• On-premises host hardening and container runtimes (Docker/containerd) on Linux/Windows.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices based on industry standards.
• Build detections to enforce container security baselines and route findings to workload teams.
• Develop secure-by-default paved roads for container teams and self-service tooling.
• Serve as domain specialist for securing container workloads on GCP, AWS, and on-premises hosts.
• Partner with platform engineering and product teams to move milestones from design to production.
• Report on container fleet risk posture, remediation progress, and program metrics.

Skills

Container security

Cloud security engineering

DevSecOps

Python

SQL

CI/CD tooling

SBOM

GCP

AWS

Education

Bachelor's degree in Computer Science or related

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

Job description

Yahoo is seeking a hands-on security engineer focusing on container security across cloud and on‑prem environments. You will help secure container workloads, translate findings into fixes for engineering teams, and mature the program with strong collaboration across platform and product teams.

You will work with GCP (GKE, Cloud Run) and AWS (EKS, ECS/Fargate) environments, build secure baselines, and leverage AI-assisted workflows to accelerate vulnerability triage and policy updates.