Endpoint Security Engineer — AI-Driven Policy & Hardening

Yahoo Holdings Inc.; Mountain View (CA); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo Holdings Inc. invites a security professional to own an end-to-end endpoint hardening program, leading a browser security platform rollout from pilot to full fleet deployment. You will own policies, collaborate across teams, and drive security improvements with a bias toward root causes.

The role expands to steady-state governance of the program, balancing security with practical work needs, and leveraging AI tools to optimize investigations and policy enforcement.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Experience with enterprise browser security or zero-trust platforms.
• 4+ years in information security, endpoint security or security engineering.
• Hands-on hardening of macOS/Windows endpoints at enterprise scale using MDM.
• Knowledge of TPM/Secure Enclave/BitLocker/FileVault and related policies.

Responsibilities

• Build and tune policies for the browser security platform.
• Collaborate with device management to scale rollout to full fleet.
• Automate review and scoring of browser extension requests using AI.
• Review AI-generated policy logic before deployment to prevent bypasses.
• Partner with identity, legal, and communications on roadmap milestones.
• Triage endpoint security exceptions and adjust policies accordingly.
• Support container and cloud security initiatives.
• Report fleet risk and progress to security leadership.

Skills

Endpoint security

macOS & Windows

MDM (Jamf/InTune)

AI tools (Claude)

Zero-trust platforms

Policy enforcement

Browser security

Education

Bachelor's degree in CS/Engineering/InfoSec

Tools

Jamf

Intune

Chrome Enterprise

Google Workspace

Santa

WDAC

AppLocker

Job description

Yahoo Holdings Inc. invites a security professional to own an end-to-end endpoint hardening program, leading a browser security platform rollout from pilot to full fleet deployment. You will own policies, collaborate across teams, and drive security improvements with a bias toward root causes.

The role expands to steady-state governance of the program, balancing security with practical work needs, and leveraging AI tools to optimize investigations and policy enforcement.