Senior Incident Response & Forensics Lead — Night Shift

Yahoo; United States; Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Healthcare

401(k)

Backup childcare

Education stipends

Job summary

Yahoo's Paranoids FIRE is seeking a senior SOC/IR analyst to lead investigations and mentor junior analysts. You will work night shifts (8 PM–6 AM ET, Mon–Thu) and leverage AI-augmented tools to identify threats at internet scale.

You will partner with engineering teams to tune detections, drive remediation, and contribute to the overall security posture across Yahoo business units. A passion for incident response and strong communication are essential.

Qualifications

• 5+ years of experience in SOC/IR with complex investigations.
• Strong experience with macOS and Linux systems, security architectures.
• Deep understanding of network/host forensics, log analysis, and malware triage.

Responsibilities

• Act as a shift lead and resource for colleagues, guiding them through complex investigations.
• Perform proactive research and threat hunting using Databricks and AI models for large-scale security detection.
• Develop and deliver table-top exercises; participate in regular threat hunting.
• Assess high-priority incidents and drive remediation across Yahoo units.
• Work with IDS, firewalls, EDR, and other security technologies; tune detection signatures.
• Collaborate with engineering teams to develop AI-augmented playbooks and new log source use cases.
• Automate repetitive IR tasks using AI tooling; participate in special projects.
• Provide 24x7 on-call rotation for critical escalations.

Skills

SOC/IR experience

MacOS/Linux

MITRE ATT&CK

AI tooling

Leadership

Threat hunting

Tools

SIEM

EDR

IDS

Databricks

AI models

Job description

Yahoo's Paranoids FIRE is seeking a senior SOC/IR analyst to lead investigations and mentor junior analysts. You will work night shifts (8 PM–6 AM ET, Mon–Thu) and leverage AI-augmented tools to identify threats at internet scale.

You will partner with engineering teams to tune detections, drive remediation, and contribute to the overall security posture across Yahoo business units. A passion for incident response and strong communication are essential.