Hybrid Endpoint Security Engineer: End-to-End Program Lead

110 Yahoo Holdings Inc.; United States; Hybride; USD 111 000 - 231 000; Plein temps

Avantages offerts par ce poste

Healthcare

401(k) plan

Backup childcare

Education stipend

Flexible hybrid work

Résumé du poste

Yahoo’s security team seeks a senior security engineer to own the end-to-end browser security platform rollout and endpoint hardening program. You’ll build policies, drive cross-team collaboration, and refine AI-assisted workflows to automate review and risk scoring of browser extension requests.

The role requires hands-on management of macOS/Windows endpoints, MDM experience (Jamf/InTune), and deep knowledge of hardware security features, device lifecycle, and DLP. Hybrid work options apply.

Qualifications

• Bachelor’s degree in a technical discipline or equivalent practical experience.
• 4+ years of experience in information security, specifically endpoint security.
• Hands-on experience hardening and managing macOS and Windows endpoints at enterprise scale using MDM platforms (e.g., Jamf, InTune) and administering browser policy.
• Solid understanding of hardware security features (TPM 2.0, Secure Enclave, Secure Boot, firmware protections) and full-disk encryption (FileVault/BitLocker).
• Experience with application control (e.g., WDAC, AppLocker) and auditing before enforcement.
• Knowledge of media sanitization per NIST SP 800-88 and data disposal practices.
• Understanding of browser extension security across Chrome, Firefox, Safari, Edge; manifest permissions and content scripts.
• Experience with enterprise identity providers (Okta, SAML) and their interaction with device/browser management.
• Policy definition and enforcement for removable media and data transfer paths (USB control).
• Experience with endpoint/browser DLP and tuning policies to avoid blocking legitimate work.
• Strong communication skills to discuss security tradeoffs with engineers and stakeholders.
• Experience using enterprise AI tools (Claude) to automate investigations and policy workflows.
• Familiarity with Claude or Gemini for structured prompting and workflow automation.

Responsabilités

• Own the endpoint hardening program with a multi-year roadmap.
• Lead rollout of a browser security platform from pilot to full production.
• Build and tune policies for the browser security platform and partner with device management teams.
• Automate policy review, risk scoring, and triage of extension requests using AI tools.
• Review AI-generated policy logic, scripts, and changes for accuracy and security.
• Collaborate with identity, legal, and communications teams to advance the security roadmap.
• Triage exceptions and update policies to prevent recurring issues.
• Work with IT across the laptop lifecycle including provisioning, encryption, and secure disposal.
• Report fleet risk posture and progress to security leadership.
• Develop AI-assisted workflows for policy generation and administrative automation.

Connaissances

Endpoint security

Zero-trust

Policy automation

AI tooling (Claude)

Browser security

MDM platforms (Jamf/InTune)

Security architecture

Cloud security

Identity providers (Okta/SAML)

Communication skills

Formation

Bachelor's degree in a technical discipline

Outils

Jamf

InTune

Google Workspace

Chrome Enterprise

Claude

Gemini

Description du poste

Yahoo’s security team seeks a senior security engineer to own the end-to-end browser security platform rollout and endpoint hardening program. You’ll build policies, drive cross-team collaboration, and refine AI-assisted workflows to automate review and risk scoring of browser extension requests.

The role requires hands-on management of macOS/Windows endpoints, MDM experience (Jamf/InTune), and deep knowledge of hardware security features, device lifecycle, and DLP. Hybrid work options apply.