Senior Corporate Product Assurance Engineer - Security Reviews

Yahoo; United States; Hybride; USD 128 000 - 267 000; Plein temps

Avantages offerts par ce poste

Healthcare benefits

401k plan

Backup childcare

Education stipends

Résumé du poste

Yahoo is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS, vendor integrations, and AI/LLM products. You will manage intake, define trust boundaries, set security requirements, and close reviews with documented dispositions inside SLAs.

You will assess identity and access, AI risk, and data handling across vendor ecosystems, driving automation and cross‑team collaboration to strengthen Yahoo's security

Qualifications

• 6+ years of security experience in product, application, or enterprise settings, including 2+ years owning reviews end to end.
• Proven ownership of a high-volume review queue with SLAs and documented dispositions.
• Strong grasp of third‑party and SaaS security assessment: SSO, OAuth 2.0, OIDC, SCIM.
• Hands-on identity and access review experience with Okta or similar IdP.
• Familiarity with enterprise productivity suites, source control, ticketing, HR/finance platforms.
• Experience with AI/LLM security concepts and OWASP Top 10 for AI/LLM.
• Knowledge of NIST CSF, NIST AI RMF, CIS Benchmarks, and OWASP frameworks.

Responsabilités

• Own Paranoid Security Reviews for corporate systems end to end – from intake through disposition and SLAs.
• Assess MCP and agentic connections for authentication, scope, token lifecycle, and audit coverage.
• Evaluate AI/LLM integrations for prompt injection and data exposure risks.
• Perform baseline configuration reviews and reconcile SaaS inventory with review history.
• Write clear, actionable dispositions for stakeholders with responsible owners.
• Automate and optimize the review workflow with scripting (e.g., Python).
• Collaborate with Privacy, Legal, Enterprise Identity, Cloud Security, and other teams on cross‑domain reviews.

Connaissances

Security reviews ownership

Review queue management

Third‑party SaaS security

AI/LLM security

Identity and access review

Okta / IdP experience

Threat modeling

Policy writing

Formation

Bachelor's Degree in a relevant field

Outils

Python

Description du poste

Yahoo is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS, vendor integrations, and AI/LLM products. You will manage intake, define trust boundaries, set security requirements, and close reviews with documented dispositions inside SLAs.

You will assess identity and access, AI risk, and data handling across vendor ecosystems, driving automation and cross‑team collaboration to strengthen Yahoo's security