Paranoids Forensic and Incident Response Operations (FIRE) Sr Analyst (NIGHT SHIFT)

About the role

A Little About Us When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as "The Paranoids".

Key Responsibilities

• Act as a shift lead and resource for colleagues, guiding them through multifaced work problems and complex investigations.
• Perform proactive research and threat hunting, utilizing Databricks and the help of AI models to identify subtle security anomalies at Internet scale.
• Work with the team to develop and deliver table-top exercises.
• Participate in regular threat hunting exercises.
• Assess high-priority security incidents and drive remediation efforts across Yahoo business units.
• Work with a variety of security technologies including IDS, firewalls, EDR, etc.
• Contribute to the overall security posture of Yahoo.
• Partner with engineering teams to tune detection signatures and develop AI-augmented playbooks for faster "badness" identification.
• Evaluate new log sources for security detection value and develop potential use cases.
• Continue to focus on process improvement, specifically automating repetitive IR tasks using some of our AI tooling.
• Participate in a 24x7 on-call rotation for critical escalations.

Requirements

• 5+ years of experience as a SOC/Incident Response Analyst, with a proven track record of handling complex investigations.
• In-depth experience with macOS and Linux systems, services, and security architectures.
• Strong background in security fundamentals, including network/host forensics, log analysis, and malware triage.
• Knowledge and experience acting as a shift lead or project lead within a security operations environment.
• A passion for the field of information security and incident response.
• Deep understanding of common network services, vulnerabilities, and modern attack patterns (MITRE ATT&CK).
• Excellent written and verbal communication skills, with the ability to communicate complex technical findings to non-technical stakeholders.
• Experience using AI assistants or LLMs (e.g., Gemini) for script generation, code review, or complex technical documentation.

Preferred Qualifications

• Experience with Event Monitoring (SIEM) solutions and large-scale telemetry platforms.
• Experience in shell scripting, Python, or similar languages for security automation and tool development.
• Experience with using LLM’s and AI tooling for data analysis and detection creation.

Benefits

The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies; exercising sound judgment; working effectively, safely and inclusively with others; exhibiting trustworthiness and meeting expectations; and safeguarding business operations and brand integrity.

Pay

The compensation for this position ranges from $128,250.00 - $266,875.00/yr and will vary depending on factors such as your location, skills and experience.

Schedule

Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!