Security Review Engineer — Corporate SaaS & AI Tools

Yahoo Holdings Inc.; Omaha (NE); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Flexible hybrid work options

Job summary

Yahoo understands that security is foundational to its products and customers. The Paranoids team reviews corporate systems, SaaS, vendor integrations, and AI/LLM tools to identify risks and drive controls.

You will triage high-volume queues, draft dispositions, and collaborate with senior reviewers on architecture decisions. Daily work includes hands-on security reviews, authentication and authorization checks, and the development of runbooks to accelerate future reviews.

Qualifications

• 3+ years in security review, IT or corporate security, with focus on secure design or technical solutions.
• Experience reviewing third‑party or internal SaaS products – authentication, data flows and access.
• Knowledge of security fundamentals: authn/authz, encryption in transit/rest, logging, secure comms.
• Knowledge of SSO and MFA enforcement with identity providers like Okta.
• Familiarity with AI/LLM security basics and data exposure risks.
• Awareness of agentic/tool-use patterns and scope/credentials/audit questions.
• Hands-on use of AI tools for analysis, and judgment to spot when they err.
• Ability to work with product owners to define requirements and validate controls.
• Strong written communication to document review decisions clearly.

Responsibilities

• Perform hands-on security reviews of corporate systems—SaaS, vendor integrations, AI/LLM products—identify risks, and recommend controls.
• Own high-volume review queue: intake triage, onboarding, access requests, and baseline checks with documented dispositions.
• Use AI-assisted tooling to triage, digest docs, and draft dispositions; verify before finalizing.
• Assist with MCP and agentic reviews—check authn, authz, scope, consent, credentials, and audit coverage.
• Contribute to internal runbooks, rubrics, and documentation to speed future reviews.
• Support annual corporate-product check-in and reconcile SaaS inventory with review history.
• Stay current with emerging threats across corporate SaaS, identity, and AI tooling.

Skills

Security reviews

SaaS security

Okta MFA

AI/LLM security basics

AI tooling

Written communication

Queue management

Tools

Okta

Runbooks

AI tooling

Job description

Yahoo understands that security is foundational to its products and customers. The Paranoids team reviews corporate systems, SaaS, vendor integrations, and AI/LLM tools to identify risks and drive controls.

You will triage high-volume queues, draft dispositions, and collaborate with senior reviewers on architecture decisions. Daily work includes hands-on security reviews, authentication and authorization checks, and the development of runbooks to accelerate future reviews.