Senior Corporate Security Review Engineer

Yahoo Holdings Inc. in; Baltimore (MD); Hybrid; USD 111,000 - 231,000; Full time

Benefits offered by this job

Flexible hybrid work options

Healthcare

401k

Backup childcare

Education stipends

Job summary

Yahoo is seeking a Paranoids Corporate System Security Engineer to lead security reviews of corporate systems, including third‑party SaaS, vendor integrations, and AI/LLM products. You will own the high‑volume review queue with senior support, triaging intake, onboarding, access requests, and baseline checks.

You will also use AI‑assisted tooling to draft dispositions, check MCP reviews and agentic connections, and help improve internal runbooks and documentation for faster future reviews.

Qualifications

• 3 years of experience in security review, IT or corporate security, or a related engineering or systems discipline with a focus on secure design or technical solutioning.
• Experience assessing third‑party or SaaS products OR internal products – reviewing how a system authenticates, where its data flows, how it works, and what access it is granted.
• Understanding of security fundamentals – authentication, authorization, encryption in transit and at rest, logging, and secure communications.
• Working knowledge of SSO and MFA enforcement in an identity provider such as Okta.
• Familiarity with AI/LLM application security basics such as sensitive data exposure through model inputs and outputs.
• Awareness of agentic and tool‑use patterns and the questions they raise about scope, credentials, and audit.
• Hands‑on use of AI tools in day‑to‑day analysis work, and the judgment to recognize where they get things wrong.
• Ability to explain requirements to product/business owners and validate controls.
• Strong written communication – document a review decision clearly.
• Ability to manage a queue: prioritize, move tickets, escalate.

Responsibilities

• Perform hands‑on security reviews of corporate systems – third‑party SaaS, vendor integrations, employee‑facing tools, and AI/LLM products – identifying risks, recommending controls, and escalating higher‑risk architecture decisions to senior reviewers.
• Own the high‑volume tiers of the review queue: intake triage, Okta onboarding, access and support requests, and baseline configuration checks, closing each to a documented disposition.
• Use AI‑assisted tooling as a standard part of review work – triaging intake, digesting vendor documentation, and drafting first‑pass dispositions – and verify the output before it goes on the record.
• Assist with MCP and agentic connection reviews – checking authentication and authorization, scope and consent, credential handling, and audit coverage against the established review rubric.
• Contribute to internal review tooling, rubrics, runbooks, and documentation, including the precedent library that makes future reviews faster.
• Support the annual corporate‑product check‑in program and help reconcile the SaaS inventory against review history to surface products that have fallen out of spec.
• Participate in ongoing learning, staying current with emerging threats across corporate SaaS, identity, and AI/agentic tooling.

Skills

Security review

IT security

Secure design

Technical solutioning

Okta

AI tools usage

Tools

Okta

SSO

Job description

Yahoo is seeking a Paranoids Corporate System Security Engineer to lead security reviews of corporate systems, including third‑party SaaS, vendor integrations, and AI/LLM products. You will own the high‑volume review queue with senior support, triaging intake, onboarding, access requests, and baseline checks.

You will also use AI‑assisted tooling to draft dispositions, check MCP reviews and agentic connections, and help improve internal runbooks and documentation for faster future reviews.