Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.

It takes powerful technology to connect our brands and partners with an audience of nearly 900 million. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world. Want in?

When you impact millions of people every single day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and makeYahoo one of the safest places on the Internet.

We are the information security team at Yahoo, known as "The Paranoids".

We protect Yahoo, its brands, and their members. We deliver information security solutions and services to protect information assets, computing infrastructure, applications and data.

Description:

Our Product Security Engineers contribute in a variety of ways from conducting assessments, performing data analysis, prototyping tooling or methodology that supports team efforts. We seek a well rounded product security engineer that can deliver value to various portions of our mission.

Tailored responsibilities may center on a project working with product security tool subject matter experts to help build, test, and deploy automation solutions for analysis pipelines. Alternatively, a project may focus on researching a specific vulnerability, vulnerability class, or discovery technique in order to engineer mitigation solutions and/or detection. Other times the individual may assist or lead reviews of various products to assess their security posture.

What a successful candidate will bring to this position:

Innovative thinking with a curiosity for problem-solving and hands-on contribution
Taking a proactive approach to drive initiatives
High personal integrity and discretion
Entry level knowledge of various cyber security subject matter areas

Requirements:

Completion of a technical collegiate program such as CS/EE
Experience in cyber security or computer programming field
Programming expertise in one or more of Python, Go, React, Java, JavaScript
Familiarity with public cloud(AWS, GCP)
Ability to work well in teams, deliver projects on time, and communicate clearly
Hunger to learn about enterprise-scale application security, automation, DevOps, etc.

Any of the following:

Knowledge of information security
Knowledge of application, web app, API security
Networking and protocols such as IP, TCP, and HTTP
DevOps tooling (SDLC)
Data analysis
Deeper than user-level knowledge of Linux, Mac, Windows, or embedded environments

Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.

Yahoo has a high degree of flexibility around employee location and hybrid working. In fact, our flexible-hybrid approach to work is one of the things our employees rave about. Most roles don’t require specific regular patterns of in-person office attendance. If you join Yahoo, you may be asked to attend (or travel to attend) on-site work sessions, team-building, or other in-person events. When these occur, you’ll be given notice to make arrangements.

If you’re curious about how this factors into this role, please discuss with the recruiter.

Currently work for Yahoo? Please apply on our internal career site.

Paranoids Technical Security Engineer I

Job Description