Security Review Engineer II — AI/LLM & SaaS Risk

Yahoo Holdings Inc.; Champaign (IL); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo is seeking a Paranoids Corporate System Security Engineer to help run the review function for everything employees use to get their work done - third-party SaaS, vendor integrations, employee-facing tools, AI/LLM products, and agentic connections entering the corporate environment. You will carry real reviews from day one, with senior reviewers backing you on the harder architecture calls.

You will perform hands-on reviews, manage high-volume queues, and use AI-assisted tooling to triage

Qualifications

• 3 years of experience in security review, IT or corporate security.
• Experience assessing third-party or SaaS products and data flows.
• Understanding of authentication, authorization, encryption in transit and at rest, logging, and secure communications.
• Working knowledge of SSO and MFA enforcement (Okta).
• Familiarity with AI/LLM application security basics and data exposure risks.
• Hands-on use of AI tools in day-to-day analysis and ability to summarize documentation.

Responsibilities

• Perform hands-on security reviews of corporate systems - third-party SaaS, vendor integrations, employee-facing tools, and AI/LLM products - identifying risks, recommending controls, and escalating higher-risk architecture decisions to senior reviewers.
• Own the high-volume tiers of the review queue: intake triage, Okta onboarding, access and support requests, and baseline configuration checks, closing each to a documented disposition.
• Use AI-assisted tooling as a standard part of review work - triaging intake, digesting vendor documentation, and drafting first-pass dispositions - and verify the output before it goes on the record.
• Assist with MCP and agentic connection reviews - checking authentication and authorization, scope and consent, credential handling, and audit coverage against the established review rubric.
• Contribute to internal review tooling, rubrics, runbooks, and documentation, including the precedent library that makes future reviews faster.
• Support the annual corporate-product check-in program and help reconcile the SaaS inventory against review history to surface products that have fallen out of spec.
• Participate in ongoing learning, staying current with emerging threats across corporate SaaS, identity, and AI/agentic tooling.

Skills

Security reviews

SaaS assessment

Okta MFA SSO

AI/LLM security

Written communication

Queue management

Tools

Okta

Job description

Yahoo is seeking a Paranoids Corporate System Security Engineer to help run the review function for everything employees use to get their work done - third-party SaaS, vendor integrations, employee-facing tools, AI/LLM products, and agentic connections entering the corporate environment. You will carry real reviews from day one, with senior reviewers backing you on the harder architecture calls.

You will perform hands-on reviews, manage high-volume queues, and use AI-assisted tooling to triage