Paranoids Validation Control Engineer

It takes powerful technology to connect our brands and partners with an audience of hundreds of millions of people. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world.<p></p><p></p><h2><b><u>About our team</u></b></h2><p><span>When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet.</span></p><p></p><p><span>We are the information security team at Yahoo; known as "</span>The Paranoids<span>".</span></p><p></p><p><span>As a Validation Control engineer on the </span>Network, Access and Identity (NAI) team<span>, you will be a part of the team charged with oversight of network permission, identity structures, and the access granted to understand the overall access permissions posture of Yahoo. You will play a key role in defending millions of internal and external Yahoo users and ensuring we are doing everything in our power to keep them safe. </span></p><p></p><p><span>As part of this team, you will be responsible for reviewing and validating our network posture in the cloud and on-prem. This includes reviewing access control lists, security groups, firewall policies, and other infrastructure that we use to secure our network and protect our customers.</span></p><p></p><p><b><u>Ideal Candidate</u></b></p><ul><li><p><span>Highly responsible, self-motivated, individual with leadership skills</span></p></li><li><p><span>Results oriented persona with the ability to adapt to a constantly changing technical environment</span></p></li><li><p><span>Energetic and fast paced individual who thrives in a high growth, entrepreneurial environment</span></p></li><li><p><span>Excellent organizational and follow up skills</span></p></li><li><p><span>Excellent interpersonal, written and verbal communication skills</span></p></li></ul><p></p><h2><b><u>Role and Responsibilities:</u></b></h2><ul><li><p><span>Work alongside a team of security architects and engineers who will review and design network, cloud, and identity access control solutions.</span></p></li><li><p><span>Work as a part of a team of security auditors who will perform network, access, and identity audits.</span></p></li><li><p><span>Gather audit requirements for our internal audits from various stakeholders within and outside of our organization, formulate an audit plan and start the process. </span></p></li><li><p><span>Automate audit capabilities wherever possible.</span></p></li></ul><p></p><h2><b><u>Qualifications:</u></b></h2><ul><li><p>Bachelor’s degree in a technical discipline (e.g., Computer Science, Engineering, Information Security) or equivalent practical experience</p></li><li><p>3 - 5 years of experience in Network Security, Cloud Security, GRC, or a closely related field</p></li><li><p>Familiarity with regulatory compliance requirements (e.g., PCI, GDPR, HIPAA, SOX) as they apply to identity and network security</p></li><li><p>Hands-on cloud security experience with AWS and/or GCP, including identity and access management, network policy enforcement, and configuration compliance</p></li><li><p>Experience in data visualization and dashboarding; knowledge of platforms such as Databricks is a plus</p></li><li><p>Deep understanding of network security principles, including firewalls and intrusion detection/prevention systems; experience with enterprise-grade platforms preferred</p></li><li><p>Proficient in automating security and compliance checks at scale using Python and cloud SDKs</p></li><li><p>Experience with automated or AI-enabled auditing and monitoring tools at scale</p></li><li><p>Strong foundation in network protocols, system intrusion techniques, VPNs, and IAM frameworks</p></li><li><p>Demonstrated expertise in firewall administration and policy management</p></li><li><p>Comfortable working with productivity and collaboration tools such as Google Workspace, macOS, Jira, Confluence, and Slack</p></li></ul><p></p><p></p><p><span>The material job duties and responsibilities of this role include those listed above as well as adhering to </span><span>Yahoo</span><span> </span><span>policies</span><span>;</span><span> </span><span>exercising sound judgment</span><span>;</span><span> </span><span>working effectively, safely and inclusively with others</span><span>;</span><span> </span><span>exhibiting </span><span>trustworthiness</span><span> </span><span>and</span><span> </span><span>meeting expectations</span><span>;</span><span> </span><span>and safeguarding business operations and brand integrity.</span></p><p></p><p>At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend