Job Description

Yahoo is a global media and tech company that connects people to their passions. We reach nearly 900M people around the world, bringing them closer to what they love—from finance and sports, to shopping, gaming and news—with the trusted products, content and tech that fuel their day. For partners, we provide a full-stack platform for businesses to amplify growth and drive more meaningful connections across advertising, search and media.

It takes powerful technology to connect our brands and partners with an audience of nearly 900 million. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world. Want in?

When you impact millions of people every single day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and makeYahoo one of the safest places on the Internet.

We are the information security team at Yahoo, known as "The Paranoids".

We protect Yahoo, its brands, and their members. We deliver information security solutions and services to protect information assets, computing infrastructure, applications and data.

Our Product Security Interns contribute in a variety of ways from conducting assessments to developing tooling supporting team efforts. We seek to provide a feel for a career as a product security engineer while delivering real value to our mission. 

Tailored responsibilities may center on a project working with product security tool subject matter experts to help build, test, and deploy automation solutions for analysis pipelines. Alternatively, a project may focus on researching a specific vulnerability, vulnerability class, or discovery technique in order to engineer mitigation solutions and/or detection. This is our chance to try something new and yours to learn, contribute, and experience our workplace. 

What a successful candidate will bring to this position:

• Innovative thinking with a curiosity for problem-solving and hands-on contribution

• Taking a proactive approach to drive initiatives

• High personal integrity and discretion

Requirements: 

• Engaged in a technical program such as CS/EE

• Programming expertise in one or more of Python, Go, React, Java, JavaScript

• Ability to work well in teams, deliver projects on time, and communicate clearly

• Hunger to learn about enterprise-scale application security, automation, DevOps, etc. 

• History of cool tech projects

Any of the following:  

• Knowledge of information security

• Knowledge of application, web app, API security 

• Networking and protocols such as IP, TCP, and HTTP

• DevOps tooling 

• Data analysis 

Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call 408-336-1409. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.

US Only: Please be aware that Yahoo requires all employees entering a U.S. Yahoo office and/or attending a company event (including client events) are required to be vaccinated for COVID-19.  This position will require the successful candidate to obtain and show proof of a vaccination to enter a U.S. Yahoo office and/or attending a company event (including client events).  Yahoo is an equal opportunity employer, and will provide reasonable accommodation to those individuals who are unable to be vaccinated consistent with federal, state, and local law.

Yahoo has a high degree of flexibility around employee location and hybrid working. In fact, our flexible-hybrid approach to work is one of the things our employees rave about. Most roles don’t require specific regular patterns of in-person office attendance. If you join Yahoo, you may be asked to attend (or travel to attend) on-site work sessions, team-building, or other in-person events. When these occur, you’ll be given notice to make arrangements. 

If you’re curious about how this factors into this role, please discuss with the recruiter.

Currently work for Yahoo? Please apply on our internal career site.