Paranoids Endpoint Security Engineer

Yahoo is a global technology and media company whose information security team, The Paranoids, protects users and enterprise systems from attacks. The Endpoint Security Engineer will own the endpoint security program end to end, including rolling out a browser security platform, developing and enforcing policies, automating request reviews with AI, managing exceptions, and reporting on security posture.

Responsibilities:

• Building and tuning the policies our browser security platform runs on, and partnering with our device management team to move a rollout from pilot devices to the full fleet
• Automating and refining how we review and score browser extension requests, using AI tools to make that process automated over time
• Reviewing and validating AI-generated policy logic, scripts, and rule changes before deployment, to make sure the output is accurate and doesn’t introduce a policy bypass
• Partnering with identity, legal, and communications teams to take the next milestone on our security roadmap from design to launch
• Triaging exceptions from employees and business stakeholders, and updating the underlying policy so the same issue doesn’t keep coming back as a one-off request
• Reporting on fleet risk posture and program progress to security leadership
• AI-Augmented Automating: Develop and refine AI-assisted workflows using enterprise AI tools (e.g., Claude) to automate the review, risk-scoring, and triage of browser extension requests and endpoint policy exceptions
• Triage incoming requests for endpoint security related exceptions and reviews
• Support team initiatives for Container Security and Cloud Security

Requirements:

• Bachelor's degree in a technical discipline (i.e., Computer Science, Engineering, Information Security) or equivalent practical experience
• Direct experience with one or more enterprise browser security or zero-trust access platforms, such as LayerX, Spin.AI, Island, Talon, NordLayer, or similar
• 4+ years of experience in information security, specifically within endpoint security or security engineering
• Hands-on experience hardening and managing macOS and Windows endpoints at enterprise scale, with an emphasis on security best practices and policy requirements, using MDM platforms such as Jamf or InTune, and administering browser policy through consoles like Google Workspace or Chrome Enterprise
• Working knowledge of how browser extensions actually work, including manifest permissions and content scripts, and how the security model differs across Chrome, Firefox, Safari, and Edge
• Experience with enterprise identity providers such as Okta or SAML, and how they intersect with device and browser management
• Experience defining and enforcing policies for removable media and data transfer paths, including USB device control, to reduce unauthorized data movement
• Experience with endpoint or browser-based data loss prevention: what it can and cannot catch, and how to tune policy without breaking legitimate work
• Strong communication skills, with the ability to work through security tradeoffs with engineers and non-technical stakeholders alike
• Experience using enterprise AI tools such as Claude to automate repetitive work and speed up investigations
• Practical experience utilizing enterprise AI platforms (e.g., Claude, Gemini) for structured prompting, log analysis, policy generation, or administrative workflow automation
• A certification specific to endpoint or device management, such as Jamf Certified Admin, Microsoft Certified: Endpoint Administrator Associate, or GIAC GCWN (Certified Windows Security Administrator), or equivalent hands-on experience
• Comfort working with large-scale data platforms such as Databricks or similar to build reporting and track program metrics
• Experience with cloud based security infrastructure, with prior experience working in both AWS and GCP
• Familiarity with container security, kubernetes and how the container lifecycle works
• Demonstrated experience engineering prompts or scripting automated workflows that integrate AI capabilities into security operation pipelines