Latest news coverage, email, free stock quotes, live scores and video are just the beginning. Discover more every day at Yahoo! Backed by Sequoia.
About the role
Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 6+ years of experience in product, application, or corporate/enterprise security, including 2+ years owning security reviews or an assurance function end to end
- Demonstrated ownership of a review queue at volume - triage, prioritization, and closing reviews to a documented disposition under a service level, not only producing findings for someone else to resolve
- Working knowledge of AI/LLM application security - prompt injection, insecure output handling, sensitive data exposure through model inputs and outputs, and the OWASP Top 10 for LLM Applications
- Hands-on identity and access review experience with Okta or a comparable IdP: MFA enforcement, provisioning and deprovisioning, service accounts and non-human identity, and least-privilege grant review
- Understanding of enterprise and collaboration infrastructure at scale - productivity suites, source control, ticketing, HR and finance platforms - and the data exposure patterns specific to each
- Familiarity with industry security frameworks (NIST CSF, NIST AI RMF, OWASP, CIS Benchmarks) and the ability to apply them as a control-based critique rather than a checklist
More about this role
Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.
When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as "The Paranoids".
Within the Paranoids, Corporate Product Assurance is the review function for everything employees use to get their work done. Every new third-party product, SaaS integration, vendor connection, AI/LLM tool, and agentic connection entering the corporate environment comes through us before it touches Yahoo data, and we own the baseline configuration reviews and the annual check-in program for the products already in place. Intake and architecture review, MCP and agentic connection review, identity and access review - this is where a business owner who needs a tool today meets a corporate attack surface that...
Browse similar: Startup jobs