Paranoids Senior Security Engineer - Cloud Security

It takes powerful technology to connect our brands and partners with an audience of hundreds of millions of people. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world.

It takes powerful technology to connect our brands and partners with an audience of nearly 900 million. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world. Want in?

When you impact millions of people every single day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet.

We are the information security team at Yahoo, known as "The Paranoids".

We protect Yahoo, its brands, and their members. We deliver information security solutions and services to protect information assets, computing infrastructure, applications and data.

Description:

The Paranoids are looking for a Sr. Cloud Security Engineer​ who ​will​ support the implementation of cloud security practices as well as infrastructure security practices at Yahoo. The engineer will identify gaps and design improvements to the cloud & container security programs, and support the compute security program. You will be joining a team that handles security on diverse platforms, including AWS and GCP public cloud environments, OpenStack private cloud environments, Kubernetes, Docker technologies, and endpoints, such as MacBook, Windows laptops, & iPhone, Android phones. Additionally, the team collaborates closely with other teams responsible for additional areas of security and governance.

What a successful candidate will bring to this position:

• Innovative thinking with a curiosity for problem-solving and hands-on contribution
• Taking a proactive approach to drive initiatives
• High personal integrity and discretion

What a typical day looks like:

• Develop and maintain scalable strategies and policies to secure Yahoo’s public cloud platforms and container environments
• Drive adoption of cloud and container security policies across the company
• Participate in cross-team efforts to design, develop, deploy, and maintain cloud and container security monitoring systems
• Design and implement improvements to accurately identify security misconfigurations
• Conduct security reviews and project consultation
• Build threat models and provide guidance on effective countermeasures
• Engage with other information security teams as a domain specialist on cloud & container security, with knowledge of infrastructure security concepts
• Support team initiatives for Compute Security

Requirements:

A bachelor’s degree or equivalent work experience in cybersecurity (or similar field). Demonstrated skills and competence with Public Cloud platforms such as AWS, GCP, Azure, and container technologies such as Kubernetes, AWS EKS, Docker. Additionally, this role is ideal for someone who has experience across a wide breadth of technology or cybersecurity areas, to include (but not limited to): Software engineering experience with a focus on operations and delivery, good written and verbal communication​ skills​, ability to engage with teams of varying technical levels to review system and service architectures, recommend secure designs, familiarity with industry standard security frameworks and benchmark system, familiarity with container security monitoring tools, such as syft, grype.

The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies; exercising sound judgment; working effectively, safely and inclusively with others; exhibiting trustworthiness and meeting expectations; and safeguarding business operations and brand integrity.

At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!

Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.

We believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.

The compensation for this position ranges from $128,250.00 - $266,875.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.

Currently work for Yahoo? Please apply on our internal career site.