Senior Container Security Engineer: Hybrid Cloud & AI Defense

Yahoo Holdings Inc.; Reston (VA); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work options

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo is seeking a hands-on container security engineer to harden cloud and on‑premises workloads across GKE, EKS, and bare metal. You will build and refine CI/CD security tooling, develop baselines, and create secure‑by‑default paths while partnering with platform engineers and product teams to push security milestones into production.

Ideal candidates have strong experience with Grype/Syft/Trivy/Anchore/Snyk Container, SBOM formats, and AI-assisted security workflows, with CIS benchmarks and

Qualifications

• 5+ years of information security experience, with at least 3 years focused on container security, cloud security engineering, or DevSecOps.
• Hands-on experience operating container vulnerability scanning and SBOM tooling in CI/CD (Grype, Syft, Trivy, Anchore, Snyk Container) including CVE triage and SBOM formats (SPDX, CycloneDX).
• GCP container security expertise, including securing GKE clusters and Cloud Run, Artifact Registry governance, and Security Command Center findings.
• On-premises host hardening across Linux/Baremetal/Windows and container runtimes.
• Kubernetes security knowledge (RBAC, namespaces, pod security, admission control).
• AWS container workloads (ECS, Fargate, EKS, ECR) and IAM model.
• Strong understanding of container image security fundamentals (base image hygiene, image signing/provenance).
• Proficiency in Python and SQL, with data pipelines on Databricks/Spark.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices based on industry standards.
• Build detections to enforce baselines and route findings to owning teams.
• Create secure-by-default paved roads for container teams with hardened base images and policy-as-code guardrails.
• Secure container workloads on GCP (GKE, Cloud Run, Artifact Registry) and AWS (EKS, ECS/Fargate, ECR); on-premises hosts and runtime configurations.
• AI-Augmented Automation: develop and refine AI-assisted workflows to automate vulnerability triage and policy updates; validate AI outputs before production.
• Collaborate with platform engineering, vulnerability operations, and product teams to move container security milestones from design to production.
• Report on container fleet risk posture and remediation progress to security leadership.

Skills

Container security

Cloud security engineering

DevSecOps

Python

SQL

AI-assisted security workflows

Vulnerability management

Education

Bachelor's degree in a technical discipline

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

SPDX

CycloneDX

GCP

AWS

Kubernetes

Job description

Yahoo is seeking a hands-on container security engineer to harden cloud and on‑premises workloads across GKE, EKS, and bare metal. You will build and refine CI/CD security tooling, develop baselines, and create secure‑by‑default paths while partnering with platform engineers and product teams to push security milestones into production.

Ideal candidates have strong experience with Grype/Syft/Trivy/Anchore/Snyk Container, SBOM formats, and AI-assisted security workflows, with CIS benchmarks and