Corporate Systems Security Engineer II — Secure & Review

Yahoo Inc.; Northern (KY); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Flexible hybrid work

Job summary

Yahoo is seeking a Corporate System Security Engineer II to lead hands-on security reviews of corporate systems, SaaS, and AI/LLM tooling. You will triage high-volume queues, onboard via Okta, and draft dispositions with senior reviewers backing you on complex decisions.

You will apply AI-assisted tooling to digest documentation, validate controls, and stay current with evolving threats across identity and vendor ecosystems. Hybrid work options are available.

Qualifications

• 3 years of experience in security review, IT or corporate security, or related engineering with a focus on secure design or technical solutioning.
• Experience assessing third-party or SaaS products OR internal products - reviewing how a system authenticates, where its data flows, how it works, and what access it is granted.
• Understanding of security fundamentals - authentication, authorization, encryption in transit and at rest, logging, and secure communications.
• Working knowledge of SSO and MFA enforcement in an identity provider such as Okta.
• Familiarity with AI/LLM application security basics such as sensitive data exposure through model inputs and outputs.
• Awareness of agentic and tool-use patterns and the questions they raise about scope, credentials, and audit.
• Hands-on use of AI tools in day-to-day analysis work (summarizing documentation, drafting findings, triage).
• Ability to work with product and business owners to explain a requirement, gather what is missing at intake, and validate that a control is actually in place.
• Strong written communication - able to document a review decision so the requester knows whether it blocks, who owns it, and what closes it.
• Ability to manage a queue: prioritize, keep tickets moving, and escalate before something ages out.

Responsibilities

• Perform hands-on security reviews of corporate systems - third-party SaaS, vendor integrations, employee-facing tools, and AI/LLM products - identifying risks, recommending controls, and escalating higher-risk architecture decisions to senior reviewers.
• Own the high-volume tiers of the review queue: intake triage, Okta onboarding, access and support requests, and baseline configuration checks, closing each to a documented disposition.
• Use AI-assisted tooling as a standard part of review work - triaging intake, digesting vendor documentation, and drafting first-pass dispositions - and verify the output before it goes on the record.
• Assist with MCP and agentic connection reviews - checking authentication and authorization, scope and consent, credential handling, and audit coverage against the established review rubric.
• Contribute to internal review tooling, rubrics, runbooks, and documentation, including the precedent library that makes future reviews faster.
• Support the annual corporate-product check-in program and help reconcile the SaaS inventory against review history to surface products that have fallen out of spec.
• Participate in ongoing learning, staying current with emerging threats across corporate SaaS, identity, and AI/agentic tooling.

Skills

Security review

SaaS security

AI/LLM security

Identity management

MFA enforcement

Communication

Queue management

Automation scripting

Tools

Okta

Job description

Yahoo is seeking a Corporate System Security Engineer II to lead hands-on security reviews of corporate systems, SaaS, and AI/LLM tooling. You will triage high-volume queues, onboard via Okta, and draft dispositions with senior reviewers backing you on complex decisions.

You will apply AI-assisted tooling to digest documentation, validate controls, and stay current with evolving threats across identity and vendor ecosystems. Hybrid work options are available.