Paranoids Forensic and Incident Response Operations (FIRE) Night Shift Lead

It takes powerful technology to connect our brands and partners with an audience of hundreds of millions of people. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world. A Little About Us When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as "The Paranoids". As part of the Paranoids Forensics and Incident Response Operations Team (FIRE), we protect Yahoo and its users from dedicated adversaries, working on the front lines monitoring for, hunting for, and responding to threats, we ensure that our users and company are kept safe. A Lot About You You are a senior security professional with extensive experience in incident response and digital forensics. You excel in high-pressure environments and are available to work the weekday night shift (5pm-1am EST or 8 PM–6 AM ET, Monday through Thursday) . You are committed to protecting sensitive corporate and user data by applying advanced technical, behavioral, and investigative solutions. You have an eye for detail, a mindset for automation, and an interest in using emerging technologies to stay ahead of sophisticated attackers. During your time here we will Give you the opportunity to take ownership of key processes supporting the mission of finding suspicious and malicious activity. Expect for you to lead key processes and mentor junior analysts in the pursuit of malicious activity. Enable you to stop advanced attackers by providing access to world-class telemetry and AI-augmented tools. Provide you with a positive work-life balance through a structured 4-day night shift schedule. Encourage you to follow complex investigations through to final remediation and post-mortem analysis. Challenge you to push the bounds of our security program and your own technical talents. Key Responsibilities Act as a shift lead and resource for colleagues, guiding them through multifaceted work problems and complex investigations. Perform proactive research and threat hunting, utilizing Databricks and the help of AI models to identify subtle security anomalies at Internet scale. Work with the team to develop and deliver table-top exercises Participate in regular threat hunting exercises Assess high-priority security incidents and drive remediation efforts across Yahoo business units. Work with a variety of security technologies including IDS, firewalls, EDR, etc Contribute to the overall security posture of Yahoo Partner with engineering teams to tune detection signatures and develop AI-augmented playbooks for faster "badness" identificati…