Paranoids, Weekend Night Shift - Forensic and Incident Response Operations (FIRE) Analyst

We need to output HTML fragment with sections: About the role? The posting includes "A Little About Us", "A Lot About You", "During your time here we will", "Responsibilities", "Basic Qualifications", "Preferred Qualifications", "The material job duties..." (maybe part of responsibilities), "At Yahoo, we offer flexible hybrid work options..." (maybe benefits?), "The compensation for this position ranges..." (Pay), "Our comprehensive benefits include..." (Benefits). Also schedule: weekend night shift (9 PM EST to 9 AM EST Friday to Sunday). So schedule is present. We must not repeat job title. No Job ID. Remove boilerplate: EEO, equal opportunity, scam warning, application instructions, etc. Also remove duplicated lines. We need to include sections only when posting has real specific content. So we need sections: About the role? Actually we have "A Little About Us" (company description) and "A Lot About You" (role description). Could combine as "About the role"? The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content to those headings. We have: - About the role: maybe combine "A Little About Us" and "A Lot About You"? But "About the role" likely describes the role itself. Could use "A Lot About You" as description of role expectations. Also "During your time here we will" could be part of role description. Better: Use "About the role" for description of the team and mission (A Little About Us + A Lot About You + During your time here we will). Or we could split into multiple sections but we should prefer few substantive sections. We have Responsibilities clearly. We have Basic Qualifications and Preferred Qualifications: could be under "Requirements" or "Qualifications". The instruction list includes Requirements, Qualifications, Skills. We can put Basic Qualifications under "Requirements" and Preferred Qualifications under "Qualifications" or combine. We have Skills maybe not explicit; but we could treat qualifications as skills. We have Benefits: "Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more." Also "At Yahoo, we offer flexible hybrid work options..." could be part of benefits. We have Pay: "The compensation for this position ranges from $88,500.00 - $184,375.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions." We have Schedule: "You are an inquisitive, highly motivated security analyst who is available to work the weekend night shift (9 PM EST to 9 AM EST Friday to Sunday)." Also maybe on-call rotation. Thus we need sections: About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay, Schedule. We must not include headings with filler. Ensure each section has substantive content. We must output only HTML fragment, no /, no markdown fences. Let's craft:

About the role

... combine A Little About Us, A Lot About You, During your time here we will.

Responsibilities

• ... list each responsibility.

Requirements

• ... Basic Qualifications items.

Qualifications

• ... Preferred Qualifications items.

Benefits

• ... flexible hybrid work options, healthcare, 401k, backup childcare, education stipends, etc.

Pay

... compensation range and bonus.

Schedule

... weekend night shift (9 PM EST to 9 AM EST Friday to Sunday) and on-call rotation.

We need to preserve all substantive information, not invent or summarize away detail. Must not omit details like "Monitor, triage, and analyze security events from networks, applications, endpoints, and cloud data stores." etc. We need to include all responsibilities bullet points. Let's extract responsibilities list: - Monitor, triage, and analyze security events from networks, applications, endpoints, and cloud data stores. - Leverage AI-assisted investigation tools and structured prompts to accelerate log parsing, synthesize alert telemetry, and draft initial incident timelines. - Assess security incidents, perform initial containment actions, and coordinate with Yahoo business units to remediate operational issues. - Identify repetitive, manual monitoring tasks and partner with senior engineers to implement AI-driven efficiencies and automated triage playbooks. - Assist in tuning detection signatures and developing new alerting use cases for identifying malicious activity across internal systems. - Evaluate new log sources for security detection value and contribute to detection engineering rules under senior analyst mentorship. - Critically evaluate and validate AI-generated outputs, detection queries, and script suggestions to prevent hallucinations and false positives. - Collaborate with the team to support regular threat hunting exercises and table-top simulation scenarios. - Maintain accurate documentation, incident response runbooks, and shift handoff logs. - Participate in a scheduled 24x7 on-call rotation as required for critical incident response escalations. Now Basic Qualifications list: - 1–3 years of experience or equivalent practical background in security fundamentals, including network/host forensics, log analysis, and basic malware triage. - Demonstrated interest in and commitment to the field of information security and incident response. - Working understanding of common network services (web, mail, DNS), protocols, network vulnerabilities, and standard adversary attack patterns (MITRE ATT&CK). - Functional hands-on experience navigating and analyzing Windows, macOS, and Linux operating systems and system logs. - Familiarity with using modern AI productivity tools or AI coding assistants (e.g., generating scripts, crafting targeted search queries, or summarizing technical logs). - Ability to work independently during shift hours and communicate effectively via collaboration platforms. - Strong written and verbal communication skills, including the ability to communicate technical findings clearly to both engineering and non-technical stakeholders. Preferred Qualifications list: - Experience querying and analyzing telemetry in Databricks or Enterprise Event Monitoring (SIEM) platforms. - Experience with shell scripting, Python, or automation languages, including experience using AI pair-programming tools to build or optimize automation scripts. - Familiarity with modern Endpoint Detection & Response (EDR), Intrusion Detection Systems (IDS), and cloud logging services. - Demonstrated curiosity in experimenting with emerging AI security capabilities and integrating workflow automations into daily operations. Benefits: "At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!" plus "Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more." We should combine into benefits bullet list: flexible hybrid work options, occasional in-person events with notice, healthcare, 401k, backup childcare, education stipends, etc. Pay: "The compensation for this position ranges from $88,500.00 - $184,375.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions." Schedule: "You are an inquisitive, highly motivated security analyst who is available to work the weekend night shift (9 PM EST to 9 AM EST Friday to Sunday)." Also on-call rotation mentioned in responsibilities; but schedule section should reflect shift. We also have "During your time here we will Give you the opportunity to contribute to key operational processes supporting the mission of finding malicious acitivty Enable you to investigate advanced threats and protect our global user baseProvide you with a positive, supportive team environment and healthy work-life balanceEncourage you to follow investigations through to full resolutionSupport your career development through continuous learning in forensic methodologies, threat hunting, and modern security automation". This is basically benefits/opportunities; could be included in About the role or Benefits. We'll include in About the role paragraph. Now we need to ensure we don't include boilerplate: EEO, equal opportunity, accommodation request, diversity statements, etc. Remove those. Also remove "The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies; exercising sound judgment; working effectively, safely and inclusively with others; exhibiting trustworthiness and meeting expectations; and safeguarding business operations and brand integrity." This is somewhat generic; but it's still substantive? It's basically a generic statement; might be considered boilerplate. The instruction: remove duplicated lines, cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. This line is more generic but maybe still part of responsibilities? It's basically saying you must follow policies etc. Could be considered boilerplate; but it's not explicitly EEO. However it's a generic statement that could be omitted? The instruction says preserve ALL substantive information; do NOT invent or summarize away detail. This line is somewhat generic but still part of job duties. I'd keep it maybe as part of responsibilities? But it's not a specific duty; it's a generic expectation. Might be considered boilerplate. Safer to omit? The instruction says remove duplicated lines, cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. This line is not exactly those categories, but it's still generic. I'd keep it to be safe? However it's not adding much. I'd include it as a responsibility bullet maybe: "Adhere to Yahoo policies, exercise sound judgment, work effectively, safely and inclusively with others, exhibit trustworthiness, meet expectations, and safeguard business operations and brand integrity." That is substantive enough. Now we need to ensure we don't repeat job title. No headings for Job ID. Now produce HTML. Let's craft:

About the role

It takes powerful technology to connect our brands and partners with an audience of hundreds of millions of people. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world. A Little About Us When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as "The Paranoids". As part of the Paranoids Forensics and Incident Response Operations Team (FIRE), we protect Yahoo and its users from dedicated adversaries. Working on the front lines monitoring for, hunting for, and responding to threats, we ensure that our users and company are kept safe. A Lot About You You are an inquisitive, highly motivated security analyst who is available to work the weekend night shift (9 PM EST to 9 AM EST Friday to Sunday). You will use Yahoo internal detection platforms, SIEM technologies, and modern AI-augmented workflows to detect and respond to security events. You are eager to protect sensitive corporate and user data from unauthorized access at Internet scale, bringing continuous curiosity and an open mindset to experimenting with emerging tools and automation to find bad actors and keep Yahoo secure. During your time here we will give you the opportunity to contribute to key operational processes supporting the mission of finding malicious activity, enable you to investigate advanced threats and protect our global user base, provide you with a positive, supportive team environment and healthy work-life balance, encourage you to follow investigations through to full resolution, and support your career development through continuous learning in