Senior Corporate Product Security Assurance Engineer

Yahoo Holdings Inc. in; Reston (VA); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Health care

401k

Education stipends

Job summary

Yahoo continues to invest in its security posture through the Paranoids program, focusing on corporate product assurance. You will own security reviews end to end for third-party SaaS, vendor integrations, and AI/LLM products, ensuring risk-based dispositions are documented and SLAs met.

Join a team that drives cross-domain reviews with Third-Party Risk, Privacy, Legal, and Cloud Security, and helps shape scalable, auditable security controls across Yahoo’s enterprise environment.

Qualifications

• 6+ years in product, application, or enterprise security including 2+ years owning security reviews end to end.
• Demonstrated ownership of a review queue at volume with SLAs.
• Strong grasp of third-party and SaaS security assessment (SSO, OAuth, data flows).

Responsibilities

• Own Paranoid Security Reviews for corporate systems end to end - SaaS, vendor integrations, tools and AI/LLM products.
• Review MCP and agentic connections as an extension of data source security perimeters.
• Assess AI and LLM integrations for prompt injection and data exposure risks.
• Run baseline configuration reviews and annual corporate-product check-ins.
• Evidence data-classification, encryption, logging, and MFA gates on reviews.

Skills

Security reviews ownership

SaaS security assessment

Okta MFA

AI/LLM security

Vendor security questionnaires

Python scripting

Stakeholder management

Education

Bachelor's degree in a relevant field

Tools

Okta

SSPM tooling

Job description

Yahoo continues to invest in its security posture through the Paranoids program, focusing on corporate product assurance. You will own security reviews end to end for third-party SaaS, vendor integrations, and AI/LLM products, ensuring risk-based dispositions are documented and SLAs met.

Join a team that drives cross-domain reviews with Third-Party Risk, Privacy, Legal, and Cloud Security, and helps shape scalable, auditable security controls across Yahoo’s enterprise environment.