29 days ago
Base Salary
$129k - $281k/yr
Responsibilities
- Lead technical privacy reviews across the product lifecycle, including architecture analysis, data-flow discovery, launch readiness, and post-launch validation.
- Map data flows and processing dependencies across web, mobile, connected TV, advertising platforms, APIs, SDKs, data pipelines, cloud services, and third-party integrations.
- Translate legal, policy, and product requirements into technical controls, acceptance criteria, engineering guidance, and reusable implementation patterns.
- Design and assess controls for data minimization, purpose limitation, consent and preference propagation, access, retention, deletion, sharing, de-identification, and user-rights workflows.
- Test privacy controls using documentation, logs, queries, network traces, configuration reviews, and other evidence, and drive remediation to closure.
- Assess advertising, identity, measurement, data collaboration, clean-room, cookie-alternative, and addressability technologies.
- Evaluate consent and preference signals, including GPC, GPP, and IAB TCF, across systems and partners.
- Assess AI and machine-learning systems across training, evaluation, inference, retrieval-augmented generation, agentic workflows, monitoring, and downstream use.
- Evaluate privacy-enhancing technologies and de-identification methods, including differential privacy, aggregation, tokenization, and clean-room controls.
- Create privacy engineering patterns, playbooks, standards, review templates, and approved automation or AI-assisted workflows.
- Identify and implement AI and automation tools for automated compliance assertions and continuous validation pipelines.
Requirements
- At least 8 years of experience in privacy engineering, privacy technology, security engineering, data governance, advertising technology, or another technical role involving complex data systems.
- Ability to review system architectures, trace end-to-end data flows, identify privacy risks, and recommend practical technical mitigations.
- Working knowledge of web, mobile, API, cloud, and data-platform architectures, including cookies, local storage, mobile identifiers, SDKs, event pipelines, and data warehouses.
- Hands-on ability to investigate data and system behavior using SQL and relevant technical tools; scripting in Python, JavaScript, or a comparable language is strongly preferred.
- Experience designing or validating controls for consent, user preferences, minimization, retention, deletion, access, data sharing, and de-identification.
- Strong understanding of privacy principles and major privacy and AI governance requirements, with the ability to convert requirements into technical outcomes.
- Experience with digital advertising, identity, measurement, consent frameworks, data collaboration, or large-scale data ecosystems.
- Ability to communicate with engineers, product leaders, lawyers, data scientists, and business partners through diagrams, requirements, and risk explanations.
- Experience assessing AI/ML architectures, including data minimization in RAG pipelines, vector database access controls, training data governance, and model evaluation techniques.
- Practical experience using approved AI productivity and developer tools such as GitHub Copilot and Gemini, with awareness of confidentiality, security, validation, and accuracy limitations.
- Preferred experience with programmatic advertising, OpenRTB, DSPs, SSPs, publisher systems, identity graphs, clean rooms, or cross-device measurement.
- Preferred experience with NIST Privacy Framework, NIST PRAM, LINDDUN, ISO 31700, privacy threat modeling, privacy-enhancing technologies, de-identification, or re-identification risk.
- Preferred familiarity with identity and access management, encryption, secrets management, logging, incident response, technical standards organizations, open-source privacy projects, or industry privacy working groups.
- CIPT, CDPSE, CIPP/US, CIPP/E, cloud, security, or comparable certification is preferred.
Benefits
- Flexible hybrid work arrangement with occasional in-person events or team sessions and advance notice for attendance requirements.
- Healthcare benefits, a 401k, backup childcare, education stipends, and additional comprehensive benefits.
- Yahoo is an equal opportunity workplace with accessibility assistance and reasonable accommodation support.
Tech Stack
Categories
About Yahoo
Yahoo builds consumer internet products—Mail, Finance, Sports, News, and Search—and an omnichannel advertising platform used by brands and publishers. It monetizes through ads and subscriptions while operating high-scale services that handle billions of daily requests for hundreds of millions of users. Founded in 1994 and headquartered in New York, it is a privately held company owned by Apollo Global Management.