Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.
A Little About Us
When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo; known as "The Paranoids".
You'll join PAE, a team within the Paranoids that builds the automation and integrations behind our vulnerability scanning and triage. We connect scanners, ticketing, code platforms, and data pipelines so findings reach the right owners quickly, with context, and with as little manual work as possible.
A Lot About You
We’re looking for a Technical Security Engineer to build reliable, scalable integrations and workflows across our issue tracking and code platforms.
What you’ll do
Build event‑driven workflows
Develop and maintain GitHub integrations for branch, commit, and pull‑request visibility in Jira, and enable branch‑from‑issue and PR status linking.
Implement secure service‑to‑service access using certificates, tokens, and IAM policies; manage service accounts and secrets with least‑privilege and rotation.
Create automation packs and libraries, integration tests, and documentation.
Build lightweight data pipelines or UDFs to enrich tickets (e.g., GeoIP, metadata lookups) using platforms like Databricks or SQL engines.
Troubleshoot API and workflow issues (permissions, screens, custom fields); partner with platform admins to resolve configuration and performance problems.
Establish CI/CD for integration code using GitHub Actions (or similar), including linting, security checks, environment promotion, and observability.
Define SLOs, alerts, and dashboards for automation health; drive post‑incident improvements and change management hygiene.
What you’ll bring
1+ years building integrations, or automation including REST APIs, webhooks, and app frameworks.
Strong development skills; comfort with automation frameworks, SDKs, and writing clean, testable code.
Hands‑on experience with secrets management, service accounts, and RBAC/IAM in cloud or enterprise environments.
Proficiency with CI/CD, version control best practices, and trunk‑based development.
Practical knowledge of ticket lifecycle design (workflows, screens, validators, post‑functions), custom fields, and templating.
Familiarity with data processing at moderate scale (SQL, schemas, UDFs) to support ticket enrichment and reporting.
Hands-on experience using AI coding assistants and agentic tools (e.g., Claude Code, Copilot) in day-to-day development, plus the judgment to review, test, and validate what they produce before it ships.
Clear communication, product thinking, and a bias for pragmatic automation.
Nice to have
Experience with N8N, StackStorm, Airflow, or similar orchestration tools.
Background in security operations or vulnerability management workflows.
Exposure to Slack/ChatOps, notification pipelines, and policy‑as‑code.
Knowledge of cloud networking fundamentals for secure egress/proxy design.
Working fluency with agentic AI development tools (e.g., Claude Code). Able to direct, review, and validate AI-generated code and automation.
How we’ll measure success
Reduced manual toil and cycle time in ticket creation, updates, and triage.
Reliable signal flow between systems with clear observability.
High automation uptime, actionable runbooks, and fast MTTR.
Reusable libraries/packs and documentation adopted by partner teams.
The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies ; exercising sound judgment ; working effectively, safely and inclusively with others ; exhibiting trustworthiness and…