8 days ago
Base Salary
$111k - $231k/yr
Responsibilities
- Lead the operational rollout and continuous tuning of Yahoo’s enterprise browser security platform across macOS and Windows devices.
- Build, maintain, and audit endpoint configuration policies using Jamf, Microsoft Intune, Google Workspace, and Chrome Enterprise.
- Develop and maintain AI-assisted workflows for browser-extension review, policy-exception intake, risk scoring, and triage.
- Review, debug, and validate AI-generated scripts, detection logic, and policy rules to prevent security bypasses and regressions.
- Triage endpoint security exceptions, identify recurring trends, and improve baseline policies at the root cause.
- Implement lifecycle controls including FileVault, BitLocker, TPM/Secure Enclave protections, application whitelisting, and media sanitization.
- Define, test, and tune DLP, removable-media, and USB-control policies.
- Maintain technical documentation and runbooks and report fleet compliance and risk metrics.
- Collaborate with IT, Identity, Cloud Security, and Container Security teams on Cyber Resilience initiatives.
Requirements
- At least 4 years of professional experience in information security, endpoint security engineering, systems administration, or security operations.
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field, or equivalent practical experience.
- Hands-on experience configuring, hardening, and deploying macOS and Windows security policies at scale using MDM platforms such as Jamf or Microsoft Intune.
- Knowledge of TPM 2.0, Apple Secure Enclave, Secure Boot, FileVault, BitLocker, and key escrow management.
- Experience with Santa, Microsoft App Control for Business or WDAC, and AppLocker in audit and enforcement modes.
- Understanding of browser security architectures, Manifest V2/V3 extension permissions, and policy enforcement across Chrome, Safari, Edge, and Firefox.
- Experience with enterprise browser security or zero-trust access platforms such as LayerX, Island, Talon, or Spin.AI.
- Experience using enterprise AI platforms or AI coding tools such as Claude or Gemini for investigations, log analysis, or administration scripts.
- Ability to evaluate and troubleshoot AI-generated scripts and configurations and identify logic flaws or security regressions.
- Experience with Okta, SAML, endpoint data protection, and DLP policies.
- Strong written and verbal communication skills and experience resolving security tradeoffs with engineering and business partners.
- Preferred certifications include Jamf Certified Admin, Microsoft Certified: Endpoint Administrator Associate, or GIAC GCWN.
- Preferred experience includes AI prompt pipelines, Databricks, Snowflake, SQL engines, Kubernetes security, AWS or GCP security, Apple Business Manager, Windows Autopilot, and ITAD sanitization verification.
Benefits
- Flexible hybrid work with occasional in-person events or team sessions and advance notice for attendance.
- Healthcare benefits, a 401k, backup childcare, education stipends, and additional benefits.
- Annual compensation ranges from $111,000.00 to $231,250.00, with possible discretionary bonus or commissions.
Tech Stack
Categories
About Yahoo
Yahoo builds consumer internet products—Mail, Finance, Sports, News, and Search—and an omnichannel advertising platform used by brands and publishers. It monetizes through ads and subscriptions while operating high-scale services that handle billions of daily requests for hundreds of millions of users. Founded in 1994 and headquartered in New York, it is a privately held company owned by Apollo Global Management.