Weekend Operations Manager, Forensics & Incident Response Engineering (FIRE)

It takes powerful technology to connect our brands and partners with an audience of nearly 900 million. Whether you're looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business-and the world. Want in?
A Little About Us
When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet.
We are the information security team at Yahoo; known as " The Paranoids ".
The Paranoids Cyber Defense teams are responsible for day-to-day security operations and managing threats to the enterprise and our users. The Paranoids Forensics & Incident Response Engineering (FIRE) team monitors for, hunts for, and responds to security incidents that impact Yahoo. Additionally, this team plays an integral role in enhancing the security posture of the company.
A Lot About You
We're looking for an empathetic and process focused leader who is passionate about protecting our company and users from threats at Yahoo scale. You are able to coordinate the monitoring, investigation, and response to highly sensitive, complex security incidents, provide guidance to the team, while also managing partners. You can adeptly lead and mentor a team of security analysts, develop their capabilities, and craft a culture of resiliency within the team. We value the ability to build collaborative relationships with partner organizations.
This position is Saturday - Monday - 12 hour shifts
You are an ideal candidate for our team if you value:

• Identifying and outsmarting the adversary.
• Leading with empathy to enable teams to improve, grow, and develop.
• Answering tough questions and discovering the facts.
• Working with multiple partners to proactively solve problems.

In a typical day you may find yourself:

• Leading and coaching a group of security analysts, ensuring consistency in our investigations.
• Monitoring and investigating security events from a host of tools and data sets.
• Communicating the results of investigations to a variety of audiences, including company leadership.
• Performing after-action reviews of security incidents to improve the incident response process and our security controls.
• Defining and documenting processes and procedures that strengthen and bring consistency to our operations.
• Coordinating threat hunting engagements to proactively identify and mitigate potential attacker activity.
• Working with partner teams within Cyber Defense on workflow optimization opportunities and detection strategy.

Requirements include experience in a security monitoring or incident response role. Demonstrated security incident leadership is strongly desired, including analysis of large data sets and preservation of digital evidence. Familiarity with Endpoint Detection & Response (EDR) tools in a Mac and Linux environment is desired, as is knowledge of host- and network-based forensics. Understanding of the current cyber threat landscape, the various actors involved, and attacker frameworks (like MITRE ATT&CK) is also desired. Experience leading and growing a team is a preferred, but not required. Bachelor's degree, or equivalent work experience.
#LI-SO1
Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form ( www.yahooinc.com/careers/contact-us.html ) or call 408-336-1409. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.
At Yahoo, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected, and empowered to reach their potential and contribute their best. Check out our diversity and inclusion ( www.yahooinc.com/diversity/ ) page to learn more.
US Only: Please be aware that Yahoo requires all employees entering a U.S. Yahoo office and/or attending a company event (including client events) are required to be vaccinated for COVID-19. This position will require the successful candidate to obtain and show proof of a vaccination to enter a U.S. Yahoo office and/or attending a company event (including client events). Yahoo is an equal opportunity employer, and will provide reasonable accommodation to those individuals who are unable to be vaccinated consistent with federal, state, and local law.
Currently work for Yahoo? Please apply on our internal career site.