Paranoids Technical Security Engineer I

Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.

A Little About Us

When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as "The Paranoids".

You'll join PAE, a team within the Paranoids that builds the automation and integrations behind our vulnerability scanning and triage. We connect scanners, ticketing, code platforms, and data pipelines so findings reach the right owners quickly, with context, and with as little manual work as possible.

A Lot About You

We’re looking for a Technical Security Engineer to build reliable, scalable integrations and workflows across our issue tracking and code platforms.

What you’ll do

• Build event‑driven workflows
• Develop and maintain GitHub integrations for branch, commit, and pull‑request visibility in Jira, and enable branch‑from‑issue and PR status linking.
• Implement secure service‑to‑service access using certificates, tokens, and IAM policies; manage service accounts and secrets with least‑privilege and rotation.
• Create automation packs and libraries, integration tests, and documentation.
• Build lightweight data pipelines or UDFs to enrich tickets (e.g., GeoIP, metadata lookups) using platforms like Databricks or SQL engines.
• Troubleshoot API and workflow issues (permissions, screens, custom fields); partner with platform admins to resolve configuration and performance problems.
• Establish CI/CD for integration code using GitHub Actions (or similar), including linting, security checks, environment promotion, and observability.
• Define SLOs, alerts, and dashboards for automation health; drive post‑incident improvements and change management hygiene.

What you’ll bring

• 1+ years building integrations, or automation including REST APIs, webhooks, and app frameworks.
• Strong development skills; comfort with automation frameworks, SDKs, and writing clean, testable code.
• Hands‑on experience with secrets management, service accounts, and RBAC/IAM in cloud or enterprise environments.
• Proficiency with CI/CD, version control best practices, and trunk‑based development.
• Practical knowledge of ticket lifecycle design (workflows, screens, validators, post‑functions), custom fields, and templating.
• Familiarity with data processing at moderate scale (SQL, schemas, UDFs) to support ticket enrichment and reporting.
• Hands-on experience using AI coding assistants and agentic tools (e.g., Claude Code, Copilot) in day-to-day development, plus the judgment to review, test, and validate what they produce before it ships.
• Clear communication, product thinking, and a bias for pragmatic automation.
• Nice to have
• Experience with N8N, StackStorm, Airflow, or similar orchestration tools.
• Background in security operations or vulnerability management workflows.
• Exposure to Slack/ChatOps, notification pipelines, and policy‑as‑code.
• Knowledge of cloud networking fundamentals for secure egress/proxy design.
• Working fluency with agentic AI development tools (e.g., Claude Code). Able to direct, review, and validate AI-generated code and automation.
• How we’ll measure success
• Reduced manual toil and cycle time in ticket creation, updates, and triage.
• Reliable signal flow between systems with clear observability.
• High automation uptime, actionable runbooks, and fast MTTR.
• Reusable libraries/packs and documentation adopted by partner teams.
• The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies ; exercising sound judgment ; working effectively, safely and inclusively with others ; exhibiting trustworthiness and meeting expectations ; and safeguarding business operations and brand integrity.
• At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!
• Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form ( www.yahooinc.com/careers/contact-us.html ) or call +1.866.772.3182 . Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.
• We believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.
• The compensation for this position ranges from $88,500.00 - $184,375.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.
• Currently work for Yahoo? Please apply on our internal career site.