Senior Container Security Engineer – Hybrid Cloud & On-Prem

Yahoo Holdings Inc.; Richardson (TX); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work options

Job summary

Yahoo Holdings Inc. is seeking an experienced container security professional to deepen our security posture across cloud and on-prem environments. You will work hands-on with engineers to secure container workloads, implement baselines, and drive security improvements across GCP and AWS platforms.

You will triage vulnerabilities, design AI-assisted security workflows, and align security with developer velocity. The role offers flexible hybrid options and a broad, multi-year security roadmap.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• 5+ years in information security with at least 3 years in container/cloud security or DevSecOps.
• Hands-on experience operating container vulnerability scanning in CI/CD using tools like Grype, Syft, Trivy, Anchore or Snyk Container.
• GCP container security expertise including securing GKE, Cloud Run, Artifact Registry and Security Command Center.
• On-premises host hardening for Linux, Windows, and other distros; experience with container runtimes and kernel isolation features.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices from industry standards.
• Build detections to enforce baselines and route findings to owning teams.
• Create secure-by-default paved roads for container teams and self-service tooling.
• Act as hands-on domain specialist for securing container workloads on GCP (GKE, Cloud Run) and AWS (EKS, ECS/Fargate, ECR).
• Work with platform engineering, vulnerability operations and product teams to advance container security milestones.
• Report on container fleet risk posture, remediation progress, and program metrics to security leadership.

Skills

Container security

Cloud security

Python

SQL

CI/CD tooling

Kubernetes security

Education

Bachelor's degree

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

SPDX/CycloneDX

Job description

Yahoo Holdings Inc. is seeking an experienced container security professional to deepen our security posture across cloud and on-prem environments. You will work hands-on with engineers to secure container workloads, implement baselines, and drive security improvements across GCP and AWS platforms.

You will triage vulnerabilities, design AI-assisted security workflows, and align security with developer velocity. The role offers flexible hybrid options and a broad, multi-year security roadmap.