Senior Paranoids Corporate Security Assurance Engineer

Yahoo Holdings Inc.; Mountain View (CA); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work

Healthcare benefits

401k plan

Education stipends

Job summary

Yahoo Holdings Inc. seeks a Paranoids Corporate Product Assurance Engineer to own security reviews end to end for corporate systems, including third-party SaaS, vendor integrations, employee-facing tools, cloud migrations, and AI/LLM products.

You will assess trust boundaries, write documented dispositions, and drive the review process within SLAs, while partnering with Privacy, Legal, Enterprise Identity, Cloud Security, and the MCP Gateway team to scale risk management.

Qualifications

• 6+ years in product, application, or corporate security with reviews ownership
• Demonstrated ownership of a review queue at volume and delivering documented dispositions
• Strong grasp of third-party and SaaS security assessment and data flows across trust boundaries
• Working knowledge of AI/LLM application security and OWASP Top 10 for LLM
• Hands-on identity and access review experience with IdP (Okta)
• Understanding of enterprise collaboration infra and data exposure patterns
• Familiarity with NIST CSF, NIST AI RMF, OWASP, CIS benchmarks
• Ability to translate technical descriptions into risk-based controls and actions
• Comfort with scripting and automating workflows (Python)
• Strong stakeholder skills and ability to deliver under pressure
• Bachelor-level degree or equivalent experience

Responsibilities

• Own Paranoid Security Reviews for corporate systems end to end, including new SaaS, vendor integrations, and AI/LLM products
• Review authentication, authorization, scope, token lifecycle, and audit coverage across data sources
• Assess prompts and data handling in AI/LLM integrations for risks
• Run baseline reviews and annual check-ins, reconciling SaaS inventory with history
• Ensure evidence classification, encryption, logging, and MFA/Gates meet Yahoo standards
• Write actionable dispositions specifying observations, meaning, blockers, owners, and closure
• Build fast-tracking triage and precedent lookup to improve throughput
• Verify AI-assisted and human-drafted outputs before dispositions are finalized
• Coordinate with Third-Party Risk, Privacy, Legal, Identity, Cloud Security, and MCP Gateway
• Drive efficiency via rubrics, templates, and reusable control sets
• Cross-train peers to remove single points of failure

Skills

Security review ownership

Third-party SaaS security

Identity and access review

AI/LLM security

Scripting (Python)

Stakeholder management

Cloud security (AWS/GCP)

Education

Bachelor's degree or equivalent

Tools

Okta

Model Context Protocol

Job description

Yahoo Holdings Inc. seeks a Paranoids Corporate Product Assurance Engineer to own security reviews end to end for corporate systems, including third-party SaaS, vendor integrations, employee-facing tools, cloud migrations, and AI/LLM products.

You will assess trust boundaries, write documented dispositions, and drive the review process within SLAs, while partnering with Privacy, Legal, Enterprise Identity, Cloud Security, and the MCP Gateway team to scale risk management.