Paranoids Validation Control Analyst

It takes powerful technology to connect our brands and partners with an audience of hundreds of millions of people. Whether you’re looking to write mobile app code, engineer the servers behind our massive ad tech stacks, or develop algorithms to help us process trillions of data points a day, what you do here will have a huge impact on our business—and the world.

About our team

When you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet.

We are the information security team at Yahoo; known as "The Paranoids".

As a compliance analyst on the Network, Access and Identity (NAI) team, within the Paranoids, you will be a part of the team charged with oversight of network permission, identity structures and the access granted to understand the overall access permissions posture of Yahoo. You will play a key role in defending millions of internal and external Yahoo users and ensuring we are doing everything in our power to keep them safe.

As part of this team, you will be responsible for reviewing and validating our network posture in the cloud and on-prem. This includes reviewing access control lists, Security Groups, Firewall policies and other infrastructure that we use to secure our network and protect our customers.

Ideal Candidates

• Highly responsible, self-motivated, individual with leadership skills
• Results oriented persona with the ability to adapt to a constantly changing technical environment
• Energetic and fast paced individual who thrives in a high growth, entrepreneurial environment
• Excellent organizational and follow up skills
• Excellent interpersonal, written and verbal communication skills

Role and Responsibilities:

• Work alongside a team of security architects and engineers who will review and design network, cloud and identity access control solutions.
• Work as a part of a team of security auditors who will perform network, access and identity audits.
• Gather audit requirements for our internal audits from various stakeholders within and outside of our organization, formulate an audit plan and start the process.
• Automate audit capabilities wherever possible.

Qualifications:

• 4-year degree in a technical discipline
• Knowledge of compliance requirements such as PCI, GDPR, HIPAA, SOX for Identity and Network compliance
• AWS/ GCP experience required.
• Strong experience with network firewalls and intrusion detection systems.
• Understanding of TCP/IP, network/system intrusion techniques, firewalls and VPNs
• Understanding of IAM frameworks, Okta/IIQ experience.
• Strong knowledge of firewalls: JunOs and Palo Alto experience preferred.
• Ability to work with our technologies preferred: Google Suite, Macs, Jira, Confluence, Slack etc.

Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.

Yahoo has a high degree of flexibility around employee location and hybrid working. In fact, our flexible-hybrid approach to work is one of the things our employees rave about. Most roles don’t require specific regular patterns of in-person office attendance. If you join Yahoo, you may be asked to attend (or travel to attend) on-site work sessions, team-building, or other in-person events. When these occur, you’ll be given notice to make arrangements.

If you’re curious about how this factors into this role, please discuss with the recruiter.