Map data flows and processing dependencies across web, mobile, connected TV, advertising platforms, APIs, SDKs, data pipelines, cloud services, and third-party integrations; review and/or produce clear system and data-flow diagrams.
Translate legal, policy, and product requirements into implementable technical controls, acceptance criteria, and engineering guidance in partnership with privacy counsel, product, security, and engineering teams.
Design and assess controls for data minimization, purpose limitation, consent and preference propagation, access, retention and deletion, sharing, de-identification, including user-rights and third party data-rights workflows.
Test and validate privacy controls using system documentation, logs, queries, network traces, configuration reviews, and other appropriate evidence; identify gaps and drive remediation to closure.
Assess advertising and identity technologies, including programmatic advertising, personalization, identity resolution, first-party data strategies, retail media, clean rooms, measurement, cookie alternatives, and evolving addressability solutions.
Evaluate consent and preference signals—including GPC, GPP, and IAB TCF—and help ensure they are collected, transmitted, interpreted, and enforced consistently across systems and partners.
Assess AI and machine-learning systems across the data lifecycle, including training and evaluation data, feature generation, inference, retrieval-augmented generation, agentic workflows, monitoring, and downstream use.
Evaluate privacy-enhancing technologies and de-identification approaches—including differential privacy, aggregation, tokenization, clean-room controls, and other context-appropriate techniques—while accounting for utility, operational constraints, and re-identification risk.
Build scalable privacy engineering patterns, playbooks, technical standards, review templates, and approved automation or AI-assisted workflows that help teams ship responsibly and efficiently.
Identify, test, and institutionalize emerging AI and automation tools to continuously replace repetitive manual reviews with automated compliance assertions and continuous validation pipelines.
Basic Qualifications
8+ years of experience in privacy engineering, privacy technology, security engineering, data governance, advertising technology, or another technical role involving complex data systems.
Demonstrated ability to review system architectures, trace end-to-end data flows, identify privacy risks, and recommend practical technical mitigations.
Working knowledge of modern web, mobile, API, cloud, and data-platform architectures, including client-side and server-side processing, cookies and local storage, mobile identifiers, SDKs, event pipelines, and data warehouses.
Hands-on ability to investigate data and system behavior using SQL and relevant technical tools; scripting experience in Python, JavaScript, or a comparable language is strongly preferred.
Experience designing or validating technical controls for consent, user preferences, minimization, retention and deletion, access, data sharing, and de-identification.
Strong understanding of privacy principles and major privacy and AI governance requirements, with the ability to collaborate with counsel and convert requirements into technical outcomes.
Experience with digital advertising, identity, measurement, consent frameworks, data collaboration, or other large-scale data ecosystems.
Ability to communicate clearly with engineers, product leaders, lawyers, data scientists, and business partners, including through concise diagrams, requirements, and risk explanations.
Sound judgment in ambiguous situations and a pragmatic, user-centered approach to balancing privacy risk, technical feasibility, product quality, and delivery speed.
Demonstrated experience assessing AI/ML architectures, including deep familiarity with data minimization in RAG pipelines, vector database access controls, training data governance, and model evaluation techniques.
Practical experience utilizing approved AI productivity and developer tools (e.g., GitHub Copilot, Gemini) to accelerate system analysis, script generation, and documentation synthesis.
Responsible and effective use of approved AI tools, including an understanding of confidentiality, security, validation, and accuracy limitations.
Preferred Qualifications
Deep experience with programmatic advertising, OpenRTB, DSPs, SSPs, publisher systems, identity graphs, clean rooms, or cross-device measurement.
Experience with privacy risk or threat-modeling methods and frameworks such as the NIST Privacy Framework, NIST PRAM, LINDDUN, or ISO 31700.
Experience implementing or assessing privacy-enhancing technologies, de-identification methods, or re-identification risk.
Familiarity with security architecture and controls, including identity and access management, encryption, secrets management, logging, and incident response.
Participation in technical standards organizations, open-source privacy projects, or industry privacy working groups.
CIPT, CDPSE, CIPP/US, CIPP/E, cloud, security, or comparable certification.
The material job duties and responsibilities of this role include those listed above as well as adhering to Yahoo policies; exercising sound judgment; working effectively, safely and inclusively with others; exhibiting trustworthiness and meeting expectations; and safeguarding business operations and brand integrity.
At Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!
Yahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.
We believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.
The compensation for this position ranges from $129,210.00 - $281,305.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.
Currently work for Yahoo? Please apply on our internal career site.
