{"id":3425331,"url":"https://alion.io/job/ouryahoo-paranoids-corporate-system-security-engineer-ii","title":"Paranoids Corporate System Security Engineer II","company":{"id":4431646,"name":"Yahoo","domain":"yahoo.com","url":"https://alion.io/company/ouryahoo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":111000,"max":231250,"currency":"USD","period":"year","gross":null,"usd_annual":231250},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"NIST CSF","optional":true},{"name":"OWASP","optional":true}],"status":"closed","first_seen_at":"2026-10-06T00:00:00Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-11-04T08:11:34Z","board_verified":false,"closed_at":"2026-11-04T08:11:34Z","days_open":29,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":29},"description":"Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.A Little About Us\nWhen you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as \"The Paranoids\".\nA Lot About You\nAs a Paranoids Corporate System Security Engineer, you help run the review function for everything employees use to get their work done - third-party SaaS, vendor integrations, employee-facing tools, AI/LLM products, and agentic connections entering the corporate environment. You will carry real reviews from day one, with senior reviewers backing you on the harder architecture calls.\nResponsibilities\nPerform hands-on security reviews of corporate systems - third-party SaaS, vendor integrations, employee-facing tools, and AI/LLM products - identifying risks, recommending controls, and escalating higher-risk architecture decisions to senior reviewers.\nOwn the high-volume tiers of the review queue: intake triage, Okta onboarding, access and support requests, and baseline configuration checks, closing each to a documented disposition.\nUse AI-assisted tooling as a standard part of review work - triaging intake, digesting vendor documentation, and drafting first-pass dispositions - and verify the output before it goes on the record.\nAssist with MCP and agentic connection reviews - checking authentication and authorization, scope and consent, credential handling, and audit coverage against the established review rubric.\nContribute to internal review tooling, rubrics, runbooks, and documentation, including the precedent library that makes future reviews faster.\nSupport the annual corporate-product check-in program and help reconcile the SaaS inventory against review history to surface products that have fallen out of spec.\nParticipate in ongoing learning, staying current with emerging threats across corporate SaaS, identity, and AI/agentic tooling.\nBasic Qualifications\n3 years of experience in security review, IT or corporate security, or a related engineering or systems discipline with a focus on secure design or technical solutioning.\nExperience assessing third-party or SaaS products OR internal products - reviewing how a system authenticates, where its data flows, how it works, and what access it is granted.\nUnderstanding of security fundamentals - authentication, authorization, encryption in transit and at rest, logging, and secure communications.\nWorking knowledge of SSO and of MFA enforcement in an identity provider such as Okta.\nFamiliarity with AI/LLM application security basics such as sensitive data exposure through model inputs and outputs.\nAwareness of agentic and tool-use patterns (e.g., Model Context Protocol) and the questions they raise about scope, credentials, and audit.\nHands-on use of AI tools in day-to-day analysis work (summarizing documentation, drafting findings, triage), and the judgment to recognize where they get things wrong.\nAbility to work with product and business owners to explain a requirement, gather what is missing at intake, and validate that a control is actually in place.\nStrong written communication - able to document a review decision so the requester knows whether it blocks, who owns it, and what closes it.\nAbility to manage a queue: prioritize, keep tickets moving, and escalate before something ages out.\nPreferred Qualifications\nDemonstrated capability of working with a variety of non-technical experts and resolving queries against standard patterns or runbooks\nExposure to industry security frameworks (NIST CSF, OWASP, CIS Benchmarks) and to applying them in a real product review.\nExperience with vendor security questionnaires or third-party risk assessment cycles.\nExperience building small automations that reduce repetitive review, reporting, or reconciliation work.\nIndustry certifications such as Security+, GWAPT, GCIH, or CCSK a plus, but not required.\nThe material job duties and responsibilities of this role include those listed above as well as adhering to Yahoopolicies;exercising sound judgment;working effectively, safely and inclusively with others;exhibiting trustworthinessandmeeting expectations;and safeguarding business operations and brand integrity.\nAt Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!\nYahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.\nWe believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.\nThe compensation for this position ranges from $111,000.00 - $231,250.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.Currently work for Yahoo? Please apply on our internal career site.","description_format":"text","description_chars":6877,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-28T22:14:02Z"},{"event":"close","at":"2026-11-04T08:11:34Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":231250,"is_top_pay":true},"html_url":"https://alion.io/job/ouryahoo-paranoids-corporate-system-security-engineer-ii","json_url":"https://alion.io/job/ouryahoo-paranoids-corporate-system-security-engineer-ii.json","meta":{"generated_at":"2026-11-06T16:42:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31021,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4431646},"rest":"https://alion.io/mcp/rest/get_company?id=4431646"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fouryahoo-paranoids-corporate-system-security-engineer-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fouryahoo-paranoids-corporate-system-security-engineer-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fouryahoo-paranoids-corporate-system-security-engineer-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ouryahoo-paranoids-corporate-system-security-engineer-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fouryahoo-paranoids-corporate-system-security-engineer-ii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3425331}},{"tool":"search_jobs","arguments":{"company":"yahoo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3425331},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}