Senior Corporate Security Product Assurance Engineer

Yahoo Holdings Inc.; Omaha (NE); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work

Competitive compensation

Job summary

Yahoo is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS, vendor integrations, and AI/LLM products. You will manage intake, set security requirements, and close reviews within SLAs.

The role focuses on risk-based decisions, automation, and cross-team collaboration, with an emphasis on AI risk and data protection across enterprise tools. Flexible hybrid work options are offered.

Qualifications

• 6+ years in product, application, or enterprise security.
• Own a review queue end to end under SLA.
• Strong grasp of third-party and SaaS security assessment.
• Hands-on identity and access review with Okta or comparable IdP.
• Familiarity with NIST CSF, NIST AI RMF, OWASP, CIS.

Responsibilities

• Own Paranoid Security Reviews for corporate systems end to end.
• Review connections and token lifecycle in data sources' perimeters.
• Assess AI/LLM integrations for prompt injection and data exposure.
• Run baseline configuration reviews and inventory reconciliation.
• Write dispositions with clear observations, meaning, and actions.
• Build and tune triage layers for efficient reviews.
• Verify AI-assisted outputs before final dispositions.
• Collaborate across teams to ensure proper handoff and coverage.

Skills

Security reviews

SLA management

Threat modeling

Stakeholder mgmt

Automation scripting

Python scripting

Education

Bachelor's degree

Tools

Okta

SSO/OIDC/OAuth

Model Context Protocol

Job description

Yahoo is seeking a Paranoids Corporate Product Assurance Engineer to own end-to-end security reviews for corporate systems, including third-party SaaS, vendor integrations, and AI/LLM products. You will manage intake, set security requirements, and close reviews within SLAs.

The role focuses on risk-based decisions, automation, and cross-team collaboration, with an emphasis on AI risk and data protection across enterprise tools. Flexible hybrid work options are offered.