Weekend Incident Response Analyst (AI-Driven Security)

Yahoo Holdings Inc.; Baltimore (MD); Hybrid; USD 89,000 - 184,000; Full time

Job summary

Yahoo Holdings Inc. is seeking an inquisitive security analyst to join the Paranoids on the weekend night shift (Fri–Sun, 9 PM–9 AM EST). You’ll use Yahoo’s internal detection platforms, SIEM, and AI-augmented workflows to detect and respond to security events at Internet scale.

You will protect sensitive corporate and user data, investigate threats, and collaborate with engineers to drive automated triage and reduce false positives while maintaining robust incident response.

Qualifications

• 1-3 years of experience or equivalent background in security fundamentals (network/host forensics, log analysis, malware triage).
• Working understanding of network services, protocols, vulnerabilities, and MITRE ATT&CK.
• Experience with Windows, macOS, Linux logs and event data.
• Familiarity with AI productivity tools or AI coding assistants for scripting and log analysis.

Responsibilities

• Monitor, triage, and analyze security events across networks, apps, endpoints and cloud data stores.
• Leverage AI-assisted investigation tools to accelerate log parsing and draft incident timelines.
• Contain incidents and coordinate remediation with Yahoo business units.
• Develop automated triage playbooks with senior engineers.
• Tune detection signatures and develop new alerting use cases.
• Evaluate new log sources for detection value and contribute to rules.
• Support threat hunting exercises and create runbooks and handoff logs.
• Participate in 24x7 on-call rotations as required.

Skills

Security fundamentals

Forensics

Log analysis

MITRE ATT&CK

AI productivity tools

Windows/macOS/Linux

Tools

Databricks

SIEM platforms

Python

Shell scripting

Job description

Yahoo Holdings Inc. is seeking an inquisitive security analyst to join the Paranoids on the weekend night shift (Fri–Sun, 9 PM–9 AM EST). You’ll use Yahoo’s internal detection platforms, SIEM, and AI-augmented workflows to detect and respond to security events at Internet scale.

You will protect sensitive corporate and user data, investigate threats, and collaborate with engineers to drive automated triage and reduce false positives while maintaining robust incident response.