{"id":3649031,"url":"https://alion.io/job/yahoo-paranoids-senior-container-security-engineer","title":"Paranoids Senior Container Security Engineer","company":{"id":4431646,"name":"Yahoo","domain":"yahoo.com","url":"https://alion.io/company/ouryahoo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":128250,"max":266875,"currency":"USD","period":"year","gross":null,"usd_annual":266875},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"AWS Fargate","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"containerd","optional":false},{"name":"CVE","optional":false},{"name":"Databricks","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Gemini","optional":false},{"name":"Google Cloud Run","optional":false},{"name":"Google GKE","optional":false},{"name":"Grype","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Snyk","optional":false},{"name":"Spark","optional":false},{"name":"SQL","optional":false},{"name":"Syft","optional":false},{"name":"Trivy","optional":false},{"name":"Windows","optional":false},{"name":"Checkov","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Cosign","optional":true},{"name":"Kyverno","optional":true},{"name":"LLM Guardrails","optional":true},{"name":"OPA Gatekeeper","optional":true},{"name":"Open Policy Agent","optional":true},{"name":"Service Mesh","optional":true},{"name":"Sigstore","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-02T23:39:44Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-06T09:45:07Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.A Little About Us\nYahoo reaches hundreds of millions of people every day, and that scale makes us a constant target for attackers of every kind, at every layer of our systems. Our job is to protect our users and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo, known as The Paranoids.\nWithin Cyber Resilience, our team is responsible for the security of the containers, clusters, and cloud and on-premises hosts that run Yahoo's products, and we're growing the team to take that program further.\nA Lot About You\nWe're looking for someone who wants to go deep on container security as part of a hands-on team. Working alongside the engineers who lead our container security program, you'll help keep container workloads secure across our cloud and on-premises environments, turn security findings into fixes that engineering teams can act on, and help the program keep maturing. You'll build relationships across platform and product teams to get security work prioritized and delivered, make pragmatic calls that balance security with developer velocity, and stay curious about the container threat landscape with a bias toward fixing root causes.\nResponsibilities\nOperating and improving container image scanning and SBOM tooling in CI/CD pipelines\nDeveloping container security baselines and best practices based on industry standards\nBuilding detections to enforce container security baselines and routing findings to the teams that own the affected workloads\nBuilding secure-by-default paved roads for container teams, curated hardened base images, policy-as-code guardrails, and self-service tooling - driving developer adoption, not only enforcement\nActing as the hands-on domain specialist for securing container workloads on GCP (GKE, Cloud Run, Artifact Registry) and AWS (EKS, ECS/Fargate, ECR)\nActing as the hands-on domain specialist for securing the on-premises Linux, Baremetal, Windows, and other distro hosts that container workloads run on, including host hardening, container runtime configuration, and keeping OS patches and server firmware current\nAI-Augmented Automation: Develop and refine AI-assisted workflows using enterprise AI tools (e.g., Claude) to automate vulnerability triage and security policy updates\nReviewing and validating AI-generated policy changes, queries, and triage decisions before they reach production, to make sure the output is accurate and doesn't block legitimate builds or let a real vulnerability through\nPartnering with platform engineering, vulnerability operations, and product teams to move container security milestones from design to production\nReporting on container fleet risk posture, remediation progress, and program metrics to security leadership\nThis role is what you make of it. Our container security program has a multi-year roadmap ahead of it, and you will have a real voice in how it evolves and where it goes next.\nBasic Qualifications\nBachelor's degree in a technical discipline (i.e., Computer Science, Engineering, Information Security) or equivalent practical experience.\n5+ years of experience in information security, with at least 3 years focused on container security, cloud security engineering, or DevSecOps.\nHands-on experience operating container vulnerability scanning and SBOM tooling in CI/CD, such as Grype, Syft, Trivy, Anchore, or Snyk Container, including CVE triage and working with SBOM formats like SPDX or CycloneDX\nGCP container security expertise, including hands-on experience securing GKE clusters and Cloud Run services, scanning and governing images in Artifact Registry, and working with Security Command Center findings for container workloads\nOn-premises host expertise, including hardening enterprise Linux, Baremetal, Windows and other distributions (e.g., RHEL or its derivatives), running container runtimes such as containerd or Docker on bare metal, kernel isolation features like namespaces, cgroups, and seccomp\nWorking knowledge of Kubernetes security, including RBAC, namespaces, pod security, and admission control, and how those controls differ across managed Kubernetes offerings\nAWS experience with container workloads, including ECS, Fargate, EKS, and ECR, and the IAM model that governs them\nStrong understanding of container image security fundamentals: base image hygiene, image freshness, end-of-life distribution risk, and image signing and provenance\nProficiency in Python and SQL, with the ability to build and maintain data pipelines on platforms such as Databricks or Spark without dedicated engineering suppor\nComfortable using enterprise AI tools (e.g., Claude, Gemini) in day-to-day security work - for example prompt design, vulnerability triage, query generation, or security workflow automation\nPreferred Qualifications\nA relevant certification, such as Google Cloud Professional Cloud Security Engineer, Certified Kubernetes Security Specialist (CKS), or AWS Certified Security Specialty, or equivalent hands-on experience\nExperience with Binary Authorization, Sigstore/cosign, or policy engines such as OPA Gatekeeper or Kyverno to enforce image signing and admission policy\nFamiliarity with Kubernetes network policies and east-west segmentation (NetworkPolicy, service mesh / mTLS) to limit lateral movement\nExperience evaluating or operating container runtime security tools, including agents for serverless container platforms\nExperience running Kubernetes or other container platforms on bare metal or private cloud infrastructure, and managing server firmware (BIOS/UEFI, BMC) patching and lifecycle\nFamiliarity with CIS Benchmarks or similar hardening standards for Linux, Docker, and Kubernetes\nBackground in enterprise vulnerability management programs, including severity-based SLAs, exception handling, and remediation tracking at scale\nExperience prioritizing container vulnerabilities by exploitability and reachability in running workloads\nExperience with infrastructure as code and IaC scanning, such as Terraform and Checkov\nPractical experience building AI-assisted security workflows; prompt and agent-harness design (tool integration, context, and guardrails) and automating parts of a security operations pipeline\nThe material job duties and responsibilities of this role include those listed above as well as adhering to Yahoopolicies;exercising sound judgment;working effectively, safely and inclusively with others;exhibiting trustworthinessandmeeting expectations;and safeguarding business operations and brand integrity.\nAt Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!\nYahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.\nWe believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.\nThe compensation for this position ranges from $128,250.00 - $266,875.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.Currently work for Yahoo? Please apply on our internal career site.","description_format":"text","description_chars":9112,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Advertising","Digital Media","Email Hosting & Delivery"],"lifecycle":[{"event":"open","at":"2026-11-02T23:39:44Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":33,"reasons":["conf:5","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":266875,"is_top_pay":true},"html_url":"https://alion.io/job/yahoo-paranoids-senior-container-security-engineer","json_url":"https://alion.io/job/yahoo-paranoids-senior-container-security-engineer.json","meta":{"generated_at":"2026-11-06T19:49:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3439,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4431646},"rest":"https://alion.io/mcp/rest/get_company?id=4431646"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fyahoo-paranoids-senior-container-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fyahoo-paranoids-senior-container-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fyahoo-paranoids-senior-container-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/yahoo-paranoids-senior-container-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fyahoo-paranoids-senior-container-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3649031}},{"tool":"search_jobs","arguments":{"company":"yahoo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3649031},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}