Yahoo
Paranoids Sr Technical Security Engineer - Vulnerability Management
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Yahoo
Yahoo is a global technology and internet media company founded in January 1994 by Jerry Yang and David Filo. Originally starting as a human-edited web directory, it quickly transformed into one of the first popular online directories and search engines. Over the years, Yahoo expanded its offerings to include a variety of services such as Yahoo Search, Yahoo Mail, Yahoo News, and Yahoo Messenger, along with additional features like chat rooms, shopping, and finance services. The company primarily generates revenue through advertising, utilizing its large user base to attract advertisers. Yahoo serves a diverse audience, providing essential web-based services for general internet users and targeted advertising opportunities for businesses. With localized versions available in multiple languages, Yahoo maintains a significant presence in the global internet landscape. Its legacy as a pioneering web portal continues to influence the industry today.
Security at Yahoo
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Stated AppSec Mission: - "We are the information security team at Yahoo—the "trusted" in "trusted guide.""– Yahoo Paranoids (https://www.yahooinc.com/our-technology/paranoids), Company Web Page , Developer Enablement vs. Gatekeeping: - "Using bug bounty as a tool to incentivize independent security researchers"– Yahoo Paranoids (https://www.yahooinc.com/our-technology/paranoids), Company Web Page , - "As a result, product owners and engineers can access that shared timeline"– ASHIRT blog (https://www.yahooinc.com/paranoids/making-red-teaming-easier-ashirt-an-open-source-tool-for-operators) ⚠️, Company Blog”
Security Team
Org Structure & Reporting Line: - "T&S is led by our Chief Information Security Officer ("CISO"), Lonnie Benavides."– Yahoo 2024 Annual Report (https://s21.q4cdn.com/596622263/files/doc_financials/2024/ar/2024-Annual-Report.pdf) ⚠️, Annual Report , - "who reports to our Chief Technology Officer ("CTO"), Chuck Geiger."– Yahoo 2024 Annual Report (https://s21.q4cdn.com/596622263/files/doc_financials/2024/ar/2024-Annual-Report.pdf) ⚠️, Annual Report , - "Information Security ... structured around the following pillars: (i) Application Security"– Yahoo 2024 Annual Report (https://s21.q4cdn.com/596622263/files/doc_financials/2024/ar/2024-Annual-Report.pdf) ⚠️, Annual Report
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.