Corporate Systems Security Review Engineer

Yahoo Holdings Inc.; Nashville (TN); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Flexible hybrid work

Healthcare benefits

401(k) plan

Job summary

Yahoo Holdings Inc. is seeking a Paranoids Corporate System Security Engineer to oversee reviews of third-party SaaS, employee tools, and AI/LLM products.

You will own high-volume queues, apply AI-assisted tooling, and collaborate with product teams to ensure secure authentication and data handling across corporate systems. This role combines hands-on reviews with policy and tooling development, requires strong written communication, and offers flexible hybrid work options.

Qualifications

• 3 years of experience in security review or related engineering.
• Experience assessing third-party or SaaS products and data/auth flows.
• Understanding of authentication, authorization, encryption, logging, and secure communications.
• Working knowledge of SSO and MFA enforcement in Okta.
• Familiarity with AI/LLM security basics including data exposure.
• Awareness of agentic and tool-use patterns and related scope/credentials questions.
• Hands-on use of AI tools for analysis, drafting findings, and triage.
• Ability to explain requirements to product/business owners and validate controls.
• Strong written communication detailing review decisions.
• Ability to manage a queue and escalate before aging out.

Responsibilities

• Perform hands-on security reviews of corporate systems - third-party SaaS, vendor integrations, employee-facing tools, and AI/LLM products - identifying risks, recommending controls, and escalating higher-risk architecture decisions to senior reviewers.
• Own the high-volume tiers of the review queue: intake triage, Okta onboarding, access and support requests, and baseline configuration checks, closing each to a documented disposition.
• Use AI-assisted tooling as a standard part of review work - triaging intake, digesting vendor documentation, and drafting first-pass dispositions - and verify the output before it goes on the record.
• Assist with MCP and agentic connection reviews - checking authentication and authorization, scope and consent, credential handling, and audit coverage against the established review rubric.
• Contribute to internal review tooling, rubrics, runbooks, and documentation, including the precedent library that makes future reviews faster.
• Support the annual corporate-product check-in program and help reconcile the SaaS inventory against review history to surface products that have fallen out of spec.
• Participate in ongoing learning, staying current with emerging threats across corporate SaaS, identity, and AI/agentic tooling.

Skills

Security reviews

Third-party / SaaS assessment

SSO & MFA (Okta)

AI/LLM security basics

Documentation & reporting

Queue management

Communication with product owners

Threat awareness

Job description

Yahoo Holdings Inc. is seeking a Paranoids Corporate System Security Engineer to oversee reviews of third-party SaaS, employee tools, and AI/LLM products.

You will own high-volume queues, apply AI-assisted tooling, and collaborate with product teams to ensure secure authentication and data handling across corporate systems. This role combines hands-on reviews with policy and tooling development, requires strong written communication, and offers flexible hybrid work options.