Senior Corporate Product Assurance Engineer - AI & SaaS Security

Yahoo Holdings Inc.; Champaign (IL); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work options

Healthcare benefits

401k plan

Backup childcare

Education stipends

Job summary

Yahoo is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS, vendor integrations, employee tools, cloud migrations, and AI/LLM products.

You will enforce SLAs, craft actionable dispositions, and collaborate across risk, privacy, legal, enterprise identity, cloud and other security teams to scale reviews while keeping explainability and policy compliance.

Qualifications

• 6+ years in product, application, or corporate security with 2+ years owning security reviews end to end.
• Ownership of a review queue at volume with SLAs and documented dispositions.
• Strong grasp of third-party and SaaS security assessment: tenant config, SSO, data flows, subprocessors.
• Experience with AI/LLM application security: prompt injection, data exposure, risk awareness.
• Hands-on identity and access review experience with IdP (Okta or similar).
• Understanding of enterprise collaboration infra and data exposure patterns per product.
• Familiarity with NIST CSF, NIST AI RMF, OWASP, CIS Benchmarks.
• Ability to translate technical description into actionable, risk-based disposition.
• Comfort with Python scripting and API-driven workflows.
• Strong stakeholder skills and deliveryPressure resilience.
• Bachelor’s degree or equivalent work experience.

Responsibilities

• Own Paranoid Security Reviews end to end for corporate systems and AI/LLM products.
• Review connections and data flows across trust boundaries: authentication, scope, tokens, auditing.
• Assess AI/LLM integrations for prompt injection and data exposure risks.
• Conduct baseline configuration reviews and annual inventory reconciliations.
• Ensure evidence data-classification, encryption, logging, and MFA compliance.
• Write clear dispositions with observations, impact, ownership, and closure steps.
• Build triage layers: risk tiering, precedent lookup, and guardrails for automation.
• Verify AI-assisted and agent-drafted outputs before disposition approvals.
• Collaborate across risk, privacy, legal, enterprise identity, cloud and network security teams.
• Drive efficiency through rubrics, templates, reusable controls, and automation.
• Cross-train peers to avoid single points of failure.

Skills

Security reviews ownership

Triage and prioritization

SaaS security assessment

AI/LLM security

Okta identity management

Python scripting

Stakeholder management

Cloud security basics

Threat modeling

Security frameworks

Education

Bachelor's degree or equivalent

Tools

Okta

Job description

Yahoo is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS, vendor integrations, employee tools, cloud migrations, and AI/LLM products.

You will enforce SLAs, craft actionable dispositions, and collaborate across risk, privacy, legal, enterprise identity, cloud and other security teams to scale reviews while keeping explainability and policy compliance.