Senior Container Security Engineer – Cloud & On‑Prem Defender

Yahoo Holdings Inc.; Champaign (IL); Hybrid; USD 128,000 - 267,000; Full time

Job summary

Yahoo is seeking a hands-on container security engineer to secure container workloads across GCP, AWS and on‑prem environments, turning findings into fixes and maturing the program.

You’ll partner with platform engineering, vulnerability operations and product teams to balance security with developer velocity, set baselines, and drive secure-by-default adoption while contributing to a multi‑year roadmap. This role supports a flexible hybrid work model.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years in information security with 3+ years on container/security cloud/DevSecOps.
• Hands-on experience with container vulnerability scanning in CI/CD and SBOM formats.
• GCP security expertise including securing GKE, Cloud Run, Artifact Registry, and SCC.
• On-premises host hardening and container runtimes like Docker/containerd.
• Knowledge of Kubernetes security (RBAC, namespaces, pod security, admission).
• AWS container workloads (ECS, Fargate, EKS, ECR) and IAM models.
• Python and SQL, with data pipelines on Databricks or Spark.
• Experience with enterprise AI tools (Claude, Gemini) in security work.

Responsibilities

• Operating and improving container image scanning and SBOM tooling in CI/CD
• Developing container security baselines and best practices
• Building detections to enforce baselines and route findings to owners
• Creating secure-by-default paved roads, hardened base images, policy-as-code guardrails
• Securing container workloads on GCP, AWS, and on‑prem environments
• Harden Linux/Baremetal/Windows hosts and manage OS patches
• AI-assisted workflow development to automate vulnerability triage
• Reviewing AI-generated policy changes before production
• Partnering with platform engineering, vulnerability ops, and product teams
• Reporting container fleet risk posture and remediation progress
• Influencing the multi-year roadmap for container security

Skills

Container security

CI/CD vulnerability scanning

GCP security

AWS security

Kubernetes security

Python

SQL

SBOM tooling

AI-assisted security workflows

Education

Bachelor's degree

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

SPDX/CycloneDX

Terraform

Checkov

OPA Gatekeeper

Kyverno

Sigstore/cosign

Binary Authorization

Job description

Yahoo is seeking a hands-on container security engineer to secure container workloads across GCP, AWS and on‑prem environments, turning findings into fixes and maturing the program.

You’ll partner with platform engineering, vulnerability operations and product teams to balance security with developer velocity, set baselines, and drive secure-by-default adoption while contributing to a multi‑year roadmap. This role supports a flexible hybrid work model.