Security Review Engineer - Corporate SaaS & AI

Yahoo Holdings Inc.; Mountain View (CA); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Flexible hybrid work options

Healthcare benefits

401(k) plan

Education stipends

Backup childcare

Accessibility assistance

Job summary

Yahoo Holdings Inc. is seeking a Paranoids Corporate System Security Engineer to lead security reviews of corporate systems, including third‑party SaaS, vendor integrations, and AI/LLM products.

You will own intake triage, onboarding, and access requests, drafting dispositions with senior reviewers backing you on architecture decisions. You will use AI‑assisted tooling to triage and draft findings, ensure proper authentication/authorization, and contribute to runbooks and documentation to

Qualifications

• 3 years of experience in security review, IT or corporate security, or related engineering/system discipline with focus on secure design/solutioning.
• Experience assessing third‑party or SaaS/products or internal products – reviewing authentication, data flows, access.
• Understanding of security fundamentals – authentication, authorization, encryption in transit/rest, logging, secure communications.
• Working knowledge of SSO and MFA enforcement in an identity provider such as Okta.
• Familiarity with AI/LLM application security basics such as data exposure in model inputs/outputs.
• Awareness of agentic and tool‑use patterns (e.g., Model Context Protocol) and related scope/credentials/audit questions.
• Hands‑on use of AI tools in day‑to‑day analysis (summaries, findings, triage).
• Ability to explain requirements to product/business owners and validate controls in place.
• Strong written communication to document review decisions.

Responsibilities

• Perform hands‑on security reviews of corporate systems—third‑party SaaS, vendor integrations, employee tools, and AI/LLM products.
• Own high‑volume tiers of the review queue: intake triage, onboarding, access/support requests, baseline checks, documented disposition.
• Use AI‑assisted tooling for triage, vendor docs, and drafting dispositions, and verify output.
• Assist with MCP and agentic connection reviews—checking authentication/authorization, scope/consent, credential handling, audit coverage.
• Contribute to internal review tooling, rubrics, runbooks, and precedent library for faster future reviews.
• Support annual corporate‑product check‑in and reconcile SaaS inventory with review history.
• Stay current with emerging threats across corporate SaaS, identity, and AI tooling.

Skills

Security review

Third‑party risk

SSO/MFA

AI security basics

Model Context Protocol awareness

AI tooling use

Documentation & communication

Queue management

Tools

Okta

Job description

Yahoo Holdings Inc. is seeking a Paranoids Corporate System Security Engineer to lead security reviews of corporate systems, including third‑party SaaS, vendor integrations, and AI/LLM products.

You will own intake triage, onboarding, and access requests, drafting dispositions with senior reviewers backing you on architecture decisions. You will use AI‑assisted tooling to triage and draft findings, ensure proper authentication/authorization, and contribute to runbooks and documentation to