Senior Corporate Product Security Assurance Engineer

Yahoo Holdings Inc.; Baltimore (MD); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Backup childcare

Education stipends

Job summary

Yahoo Holdings Inc. is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, third-party SaaS, and AI/LLM products.

You will manage authentication, data flows, and audit coverage while driving streamlined triage and governance in a high-volume queue. You will collaborate with Privacy, Legal, Identity, Cloud Security, and other teams to ensure risk-based dispositions are clear and actionable, with strong focus on scalable review

Qualifications

• 6+ years in product, application, or enterprise security with 2+ years owning security reviews or an assurance function end to end.
• Proven ability to manage a high-volume review queue with SLAs and documented dispositions.
• Strong grasp of third-party and SaaS security assessment including SSO and provisioning.
• Hands-on identity and access review experience with Okta or similar IdP.
• Experience with AI/LLM security reviews and model governance.

Responsibilities

• Own Paranoid Security Reviews for corporate systems end to end, including SaaS and AI/LLM products, with SLA adherence.
• Review connections and data flows for authentication, authorization, tokens, and audit coverage.
• Assess AI/LLM integrations for prompt injection and data exposure risks.
• Lead baseline reviews and reconcile SaaS inventory with review history.
• Ensure evidence data-classification, encryption, logging, and MFA controls meet Yahoo standards.
• Write clear dispositions for stakeholders on observations, implications and closure.
• Improve triage and first-pass review layers through rubrics and templates.
• Verify AI-assisted outputs before final dispositions are issued.
• Collaborate with cross-domain teams to ensure cross-functional reviews aren’t skipped.

Skills

Security reviews

SaaS security

Okta IAM

AI/LLM security

Python scripting

Stakeholder management

NIST CSF

Risk-based decisioning

Education

Bachelor's degree

Tools

Okta

Job description

Yahoo Holdings Inc. is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, third-party SaaS, and AI/LLM products.

You will manage authentication, data flows, and audit coverage while driving streamlined triage and governance in a high-volume queue. You will collaborate with Privacy, Legal, Identity, Cloud Security, and other teams to ensure risk-based dispositions are clear and actionable, with strong focus on scalable review