Senior Container Security Engineer: Cloud & On-Prem Defender

Yahoo Holdings Inc. in; Baltimore (MD); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo seeks a hands-on Container Security Engineer to own security of container workloads across cloud, on‑premises and hybrid environments. You’ll implement image scans, SBOM workflows, and enforce baselines while partnering with platform and product teams to balance security with developer velocity.

You will apply deep container security expertise (GKE, EKS, ECS, on‑premises hosts) and contribute to AI-assisted automation, policy updates, and security metrics for leadership review.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years in information security with at least 3 years in container security, cloud security engineering, or DevSecOps.
• Hands-on experience with container vulnerability scanning and SBOM tooling in CI/CD (Grype, Syft, Trivy, Anchore, Snyk Container).
• GCP container security expertise including securing GKE and Cloud Run, Artifact Registry governance, and SCC findings.
• On-prem host hardening for Linux/Windows and container runtimes (Docker, containerd).
• Kubernetes security basics including RBAC, namespaces, and admission controls.
• AWS container workloads experience (ECS, Fargate, EKS, ECR) and IAM modeling.
• Strong Python and SQL abilities for data pipelines on Databricks or Spark.

Responsibilities

• Operating and improving container image scanning and SBOM tooling in CI/CD pipelines.
• Developing container security baselines and best practices based on industry standards.
• Building detections to enforce container security baselines and routing findings to owners.
• Creating secure-by-default paths, hardened base images, and policy-as-code guardrails to drive adoption.
• Serving as hands-on domain expert for securing container workloads on GCP and AWS, as well as on-prem hosts.
• Developing AI-assisted security workflows and validating AI-driven policy changes before production.

Skills

Container security

Cloud security engineering

DevSecOps

CI/CD tooling

SBOM

Python

SQL

GCP

AWS

Kubernetes security

Education

Bachelor's degree in a technical discipline

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

Job description

Yahoo seeks a hands-on Container Security Engineer to own security of container workloads across cloud, on‑premises and hybrid environments. You’ll implement image scans, SBOM workflows, and enforce baselines while partnering with platform and product teams to balance security with developer velocity.

You will apply deep container security expertise (GKE, EKS, ECS, on‑premises hosts) and contribute to AI-assisted automation, policy updates, and security metrics for leadership review.