Hybrid Corporate Security Engineer: SaaS & AI Risk Reviews

Yahoo; United States; Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Flexible hybrid work

Healthcare

401k

Education stipends

Job summary

Yahoo is seeking a Paranoids Corporate System Security Engineer to run security reviews of third-party SaaS, vendor integrations, and employee-facing tools, including AI/LLM products. You will participate in high-volume review queues and help ensure risk-based decisions are documented.

You will apply AI-assisted tooling for triage and drafting dispositions, validate controls, and support ongoing MCP and agentic reviews, all within a flexible hybrid work model.

Qualifications

• 3 years of experience in security review, IT or corporate security, with a focus on secure design or technical solutioning.
• Experience assessing third-party or SaaS products or internal products - reviewing authentication, data flows, and access.
• Understanding security fundamentals - authentication, authorization, encryption in transit and at rest, logging, and secure communications.
• Familiarity with SSO and MFA enforcement in an identity provider such as Okta.
• Experience using AI tools for analysis and creating dispositions, with good judgment.

Responsibilities

• Perform hands-on security reviews of corporate systems and AI/LLM products, identify risks and recommend controls.
• Own high-volume review queue: intake triage, Okta onboarding, access requests, and baseline configuration checks, closing each to a documented disposition.
• Use AI-assisted tooling to triage intake, digest vendor documentation, and drafting first-pass dispositions, and verify the output before it goes on the record.
• Assist with MCP and agentic connection reviews - checking authentication and authorization, scope and consent, credential handling, and audit coverage against the established review rubric.
• Contribute to internal review tooling, rubrics, runbooks, and documentation, including the precedent library that makes future reviews faster.
• Support the annual corporate-product check-in program and help reconcile the SaaS inventory against review history to surface products that have fallen out of spec.
• Participate in ongoing learning, staying current with emerging threats across corporate SaaS, identity, and AI/agentic tooling.

Skills

Security review experience

SSO & MFA with Okta

AI/LLM security basics

Strong written communication

Queue management

Requirement clarification

Tools

Okta

AI tooling

Runbooks

Job description

Yahoo is seeking a Paranoids Corporate System Security Engineer to run security reviews of third-party SaaS, vendor integrations, and employee-facing tools, including AI/LLM products. You will participate in high-volume review queues and help ensure risk-based decisions are documented.

You will apply AI-assisted tooling for triage and drafting dispositions, validate controls, and support ongoing MCP and agentic reviews, all within a flexible hybrid work model.