Endpoint Security Engineer: Browser & Endpoint Hardening

Yahoo Holdings Inc.; Champaign (IL); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Healthcare

401(k)

Job summary

Yahoo is seeking an experienced security engineer to own the endpoint hardening program and roll out a browser security platform from pilot to production. You will define policies, balance security with user workflow, and build cross-team partnerships to drive milestones.

You will oversee AI-assisted review and risk scoring of extension requests, triage security exceptions, and coordinate with IT for full laptop lifecycle security and data sanitization.

Qualifications

• Bachelor's degree in a technical discipline or equivalent practical experience.
• Direct experience with enterprise browser security or zero-trust platforms (LayerX, Spin.AI, Island, Talon, NordLayer).
• 4+ years in information security, specifically endpoint security or security engineering.
• Hands-on experience hardening Windows/macOS endpoints at enterprise scale using MDM like Jamf or InTune and managing browser policies via Google Workspace/Chrome Enterprise.
• Solid knowledge of hardware security features (TPM 2.0, Secure Enclave, Secure Boot, firmware protections) and full-disk encryption (BitLocker/FileVault).
• Experience with application control for macOS/Windows (WDAC/AppLocker) and policy enforcement approaches.
• Experience with media sanitization, device disposal, and data loss prevention.
• Knowledge of how browser extensions work across Chrome, Firefox, Safari, Edge.
• Experience with identity providers (Okta/SAML) and device/browse management.
• Policy enforcement for removable media and data transfer paths (USB control).
• Experience engineering prompts or scripting automated workflows integrating AI into security operations.

Responsibilities

• Lead end-to-end rollout of a new browser security platform from pilot to full production.
• Own endpoint security program in steady state and define platform policies.
• Balance security needs with user productivity in cross-team contexts.
• Review AI-generated policy logic and ensure accuracy to avoid bypasses.
• Partnerships with identity, legal, and comms to advance security milestones.
• Triage exceptions and update underlying policies to prevent recurrence.
• Coordinate IT laptop lifecycle security, provisioning, and data sanitization.
• Report fleet risk posture and program progress to leadership.
• Develop AI-assisted workflows to automate review, risk scoring, and triage of requests.

Skills

Endpoint security

Policy management

MDM platforms

AI automation

Zero-trust

Browser security

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

Jamf

InTune

Chrome Enterprise

Google Workspace

Claude

Gemini

Job description

Yahoo is seeking an experienced security engineer to own the endpoint hardening program and roll out a browser security platform from pilot to production. You will define policies, balance security with user workflow, and build cross-team partnerships to drive milestones.

You will oversee AI-assisted review and risk scoring of extension requests, triage security exceptions, and coordinate with IT for full laptop lifecycle security and data sanitization.