Paranoids Corporate Security Review Lead (Hybrid)

Yahoo Holdings Inc.; Reston (VA); Hybrid; USD 128.000 - 267.000; Vollzeit

Benefits dieser Stelle

Healthcare

401k

Education stipends

Flexible hybrid work

Zusammenfassung

Yahoo Holdings Inc. is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS and AI/LLM integrations.

You will drive triage, risk tiering, and documented dispositions under SLA while coordinating with cross-functional teams across security, privacy, and legal. You will verify outputs before disposition, ensure guardrails and precedent are applied, and continuously improve review throughput through rubrics and

Qualifikationen

• 6+ years in product, application, or corporate security with 2+ years owning security reviews end to end.
• Ability to triage, prioritize, and close reviews with documented disposition under SLA.
• Strong grasp of third-party and SaaS security assessment and data flows across trust boundaries.
• Familiarity with AI/LLM security and OWASP Top 10 for LLM Applications.

Aufgaben

• Own Paranoid Security Reviews for corporate systems end to end, from intake to disposition, with SLAs.
• Review MCP and agentic connections across data sources’ perimeters: auth, scope, tokens, and audit coverage.
• Assess AI/LLM integrations for prompt injection and data exposure risks.
• Run baseline configuration reviews and reconcile SaaS inventory with review history.
• Ensure reviews have evidence data-classification, encryption, logging, and MFA/Okta gates.

Kenntnisse

Security reviews

Triage & prioritization

AI/LLM security

Okta / IdP

Python scripting

Stakeholder management

Ausbildung

Bachelor’s degree or equivalent

Tools

AWS/GCP

SSPM tooling

Vendor risk frameworks

Jobbeschreibung

Yahoo Holdings Inc. is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS and AI/LLM integrations.

You will drive triage, risk tiering, and documented dispositions under SLA while coordinating with cross-functional teams across security, privacy, and legal. You will verify outputs before disposition, ensure guardrails and precedent are applied, and continuously improve review throughput through rubrics and