Senior Container Security Engineer - Hybrid & Flexible

Yahoo; United States; Hybrid; USD 128,000 - 267,000; Full time

Job summary

Yahoo’s security team, The Paranoids, seeks a hands-on Container Security Engineer to protect container workloads across cloud and on‑prem environments. You’ll help translate security findings into fixes for engineering teams, build secure baselines, and advance the container security program.

You will partner with platform engineering, vulnerability operations, and product teams to move milestones from design to production, while maturing AI-assisted security workflows and reporting progress to

Qualifications

• Bachelor's degree in a technical discipline (e.g., Computer Science, Engineering, Information Security) or equivalent practical experience.
• 5+ years of information security experience with at least 3 years in container security, cloud security engineering, or DevSecOps.
• Hands-on experience operating container vulnerability scanning and SBOM tooling in CI/CD (Grype, Syft, Trivy, Anchore, Snyk Container) including CVE triage.
• GCP container security experience with securing GKE clusters, Cloud Run, Artifact Registry, and Security Command Center.
• On‑premises host hardening and container runtimes (Docker, containerd) on Linux, Windows; RBAC and Kubernetes security basics.

Responsibilities

• Operate and improve container image scanning and SBOM tooling in CI/CD pipelines.
• Develop container security baselines and best practices based on industry standards.
• Build detections to enforce container security baselines and route findings to owning teams.
• Create secure-by-default paved roads, hardened base images, policy-as-code guardrails, and self-service tooling to drive adoption.
• Act as hands-on domain expert for securing container workloads on GCP (GKE, Cloud Run) and AWS (EKS, ECS/Fargate, ECR).
• Secure on‑premises Linux, Baremetal, Windows hosts and ensure OS patches and firmware are current.

Skills

Container security

Cloud security

DevSecOps

Python

SQL

Education

Bachelor's degree in CS/Engineering

Tools

Grype

Syft

Trivy

Anchore

Snyk Container

GKE

Cloud Run

Artifact Registry

Kubernetes

Docker

Job description

Yahoo’s security team, The Paranoids, seeks a hands-on Container Security Engineer to protect container workloads across cloud and on‑prem environments. You’ll help translate security findings into fixes for engineering teams, build secure baselines, and advance the container security program.

You will partner with platform engineering, vulnerability operations, and product teams to move milestones from design to production, while maturing AI-assisted security workflows and reporting progress to