Paranoids Senior Product Security Engineer
Core
Lead application and mobile security assessments, drive threat modeling, and embed security into Yahoo's software development lifecycle for high-impact enterprise products.
Role type
Senior IC product security engineer (AI/LLM security focus)
Builds
Secure web and mobile applications, CI/CD security pipelines, and internal security tooling for Yahoo's product portfolio
Domain
Internet services, application security, AI/LLM security
Deliverable
production ML models | product features
Required skills
threat modeling, secure design reviews, vulnerability triage, CI/CD security integration, AI/LLM application security, mobile security, backend/systems programming, frontend/mobile programming
Preferred skills
secure framework design, cloud-native security, mobile hardening, supply chain security, AI security research, AI-assisted security tooling
Technologies
Go, Java, Python, C#, JavaScript/TypeScript, Swift, Kotlin, HTTP, TLS, CSP, OAuth, JWT, GraphQL, REST, SAST, DAST, IAST, AWS, GCP, Azure
Responsibilities
Lead application and mobile security assessments from design to deployment; Drive threat modeling and risk assessments for high-impact systems; Partner with developers to embed security into build and release pipelines; Develop and maintain internal security tooling and reusable frameworks; Lead remediation of critical vulnerabilities and coordinate incident response; Mentor security engineers and advocate for secure development practices; Collaborate with cloud security, infrastructure, and compliance teams
Seniority
Senior, hands-on IC
