Senior Container Security Engineer — Hybrid & AI-Driven

Yahoo Inc.; United States; Hybrid; USD 128,000 - 267,000; Full time

Job summary

Yahoo in the United States is seeking a Senior Container Security Engineer to own and advance Yahoo’s container security program across cloud and on‑prem environments. You will harden container workloads, implement SBOM tooling, and drive secure-by-default practices with engineering teams.

You will work with GCP and AWS container services, secure host environments, and apply AI-assisted workflows to triage vulnerabilities and update security policies.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years of experience in information security with at least 3 years in container security, cloud security engineering, or DevSecOps.
• Hands-on experience operating container vulnerability scanning and SBOM tooling in CI/CD, including CVE triage and SBOM formats (SPDX/CycloneDX).
• GCP container security expertise with GKE, Cloud Run, Artifact Registry, and Security Command Center.
• On-premises host hardening for Linux/Baremetal/Windows and container runtimes (containerd/Docker); kernel isolation features.
• Deep Kubernetes security knowledge (RBAC, namespaces, pod security, admission control).
• AWS experience with ECS/EKS/Fargate and IAM for container workloads.
• Strong understanding of container image security, base image hygiene, and image signing/provenance.
• Python and SQL proficiency for data pipelines (Databricks/Spark).
• Comfort with enterprise AI tools (Claude, Gemini) in security workflows.

Responsibilities

• Operating and improving container image scanning and SBOM tooling in CI/CD pipelines.
• Developing container security baselines and best practices.
• Building detections to enforce baselines and routing findings to owning teams.
• Creating secure-by-default paths: hardened base images, policy-as-code guardrails, self-service tooling.
• Securing container workloads on GCP (GKE, Cloud Run, Artifact Registry) and AWS (EKS, ECS/Fargate, ECR).
• Securing on-premises Linux, Baremetal, Windows hosts and keeping OS patches current.
• AI-Augmented Automation: develop AI-assisted workflows to automate vulnerability triage and policy updates.
• Reviewing AI-generated policy changes before production to avoid blocking legitimate builds.
• Partnering with platform engineering, vulnerability operations, and product teams to move milestones to production.
• Reporting on fleet risk posture, remediation progress, and program metrics to security leadership.
• Multi-year roadmap with a real voice in evolution of the program.

Skills

Container security

CI/CD tooling

GKE / Kubernetes

AWS EKS / Fargate

Python

SQL

SBOM tooling

AI tooling

Education

Bachelor's degree in CS or related

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

Job description

Yahoo in the United States is seeking a Senior Container Security Engineer to own and advance Yahoo’s container security program across cloud and on‑prem environments. You will harden container workloads, implement SBOM tooling, and drive secure-by-default practices with engineering teams.

You will work with GCP and AWS container services, secure host environments, and apply AI-assisted workflows to triage vulnerabilities and update security policies.