Lead Endpoint Security Engineer — Browser Defense

Yahoo Holdings Inc.; Reston (VA); Hybride; USD 111 000 - 231 000; Plein temps

Avantages offerts par ce poste

Flexible hybrid work options

Healthcare benefits

401k plan

Education stipends

Backup childcare

Résumé du poste

Yahoo Holdings Inc. is seeking an experienced security professional to own a browser security platform program end-to-end. You will pilot a new security platform with device management partners and scale it to full production, becoming the source of truth for endpoint security across the fleet.

You will build and refine policies, automate risk scoring with enterprise AI, and partner with identity, legal, and IT teams to advance the security roadmap. A multi-year endpoint hardening journey awaits.

Qualifications

• Bachelor’s degree in a technical discipline or equivalent experience.
• Direct experience with enterprise browser security or zero-trust platforms.
• 4+ years in information security, endpoint security or security engineering.
• Hands-on macOS/Windows endpoint hardening at enterprise scale (MDM like Jamf/InTune).
• Knowledge of hardware security features (TPM, Secure Enclave, Secure Boot).
• Experience with application control on macOS/Windows (WDAC, AppLocker, Santa).
• Experience with data loss prevention and device disposal practices.
• Understanding of browser extensions security (manifest permissions, content scripts).
• Experience with enterprise identity providers (Okta, SAML).
• Policy controls for removable media and data transfer paths.

Responsabilités

• Build and tune policies for the browser security platform and partner with device management to roll out fleet-wide.
• Automate review and risk scoring of browser extension requests using AI tools.
• Review AI-generated policy logic and scripts before deployment to avoid bypasses.
• Collaborate with identity, legal, and communications teams on the security roadmap.
• Triage exemptions and update policies to prevent recurring issues.
• Work with IT across laptop lifecycle including secure provisioning and encryption.
• Report fleet risk posture and program progress to security leadership.
• Develop AI-assisted workflows to automate investigations and policy reviews.
• Support container security and cloud security initiatives.

Connaissances

Endpoint security

MacOS security

Windows security

Policy management

AI tools (Claude)

MDM (Jamf, InTune)

Google Workspace/Chrome policy

Zero-trust / browser security

Threat modeling

Communication with engineers

Formation

Bachelor’s degree in Computer Science, Engineering, or Information Security

Outils

Jamf

InTune

Claude / Gemini

Google Workspace

Chrome Enterprise

Description du poste

Yahoo Holdings Inc. is seeking an experienced security professional to own a browser security platform program end-to-end. You will pilot a new security platform with device management partners and scale it to full production, becoming the source of truth for endpoint security across the fleet.

You will build and refine policies, automate risk scoring with enterprise AI, and partner with identity, legal, and IT teams to advance the security roadmap. A multi-year endpoint hardening journey awaits.