Senior Container Security Engineer: Cloud & On-Prem Defender

Yahoo Holdings Inc.; Omaha (NE); Hybrid; USD 128,000 - 267,000; Full time

Job summary

Yahoo Holdings Inc. is seeking a hands-on Container Security Engineer to advance security for container workloads across GCP, AWS and on‑prem environments. You will implement scanning, baselines, policies, and AI-assisted workflows to speed secure delivery.

You will partner with platform engineering, vulnerability operations and product teams to translate findings into fixes, drive security maturity, and balance security with developer velocity in a hybrid work setting.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years in information security with at least 3 years in container security or DevSecOps.
• Hands-on with container vulnerability scanning in CI/CD and SBOM formats.
• GCP security experience with GKE and Artifact Registry; Cloud Security findings experience.
• On-premises Linux/Baremetal/Windows hardening and container runtimes like containerd or Docker.
• Kubernetes security knowledge including RBAC, namespaces and admission controls.
• AWS container experience (ECS, EKS, Fargate, ECR) and IAM models.
• Python and SQL skills; data pipelines on Databricks or Spark.
• Experience with enterprise AI tools for security workflows.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD.
• Develop container security baselines and best practices.
• Build detections to enforce baselines and route findings to owners.
• Create secure-by-default baselines, hardened base images, policy gates, and self-service tooling.
• Serve as hands-on domain expert for securing container workloads on GCP, AWS, and on‑premises.
• Hardening of hosts, OS patches, and container runtime configurations.
• Develop AI-assisted workflows to automate vulnerability triage and policy updates.
• Review AI-generated policy changes prior to production to ensure accuracy.
• Collaborate with platform engineering, vulnerability operations and product teams to advance milestones.
• Report container fleet risk posture and remediation progress to security leadership.

Skills

Container security

CI/CD security

Python

SQL

GKE

EKS

Cloud security

Vulnerability triage

SBOM

Education

Bachelor's degree in Computer Science, Engineering or Information Security

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

GCP Artifact Registry

Kubernetes tooling (RBAC, etc.)

Databricks

Spark

Job description

Yahoo Holdings Inc. is seeking a hands-on Container Security Engineer to advance security for container workloads across GCP, AWS and on‑prem environments. You will implement scanning, baselines, policies, and AI-assisted workflows to speed secure delivery.

You will partner with platform engineering, vulnerability operations and product teams to translate findings into fixes, drive security maturity, and balance security with developer velocity in a hybrid work setting.