Staff Product Security Engineer - Hybrid, AI Security Focus

Okta, Inc.; Toronto; On-site; CAD 197,000 - 269,000; Full time

Benefits offered by this job

Equity

Bonus

Health insurance

Dental insurance

Vision insurance

RRSP matching

Healthcare spending

Telemedicine

Paid leave

Parental leave

Job summary

Okta, Inc. in Canada is seeking a Staff Product Security Engineer to safeguard Okta’s products through security reviews, threat modeling, code reviews, and penetration testing. You’ll guide engineering teams in secure development and automate security processes.

The role requires deep expertise in authentication protocols (SAML, OAuth, OIDC), threat modeling, and securing AI-integrated software architectures, including LLMs. Hybrid work in Canada, salary 141k–193k USD plus benefits.

Qualifications

• Expertise in identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review.
• Strong experience in penetration testing and secure development practices.
• Deep technical background in assessing Large Language Models (LLMs) and securing AI-integrated software architectures.
• Proficiency in multiple programming languages (e.g., Java, Go, Python, C/C++).
• Deep understanding of authentication & authorization protocols (OIDC, SAML, OAuth).
• Ability to automate security testing using LLMs and scripting (Python, Bash, etc.).
• Experience leading security incidents and risk assessments.

Responsibilities

• Conduct security reviews, including design reviews, threat modeling, and penetration testing of new features and major changes.
• Perform manual secure code reviews across multiple programming languages.
• Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
• Lead product security incidents, assess risks, and drive remediation efforts.
• Develop security tools and automation to improve vulnerability detection and assessment.
• Mentor junior engineers and provide guidance to non-security staff on secure development practices.
• Represent Okta externally through security research, conference talks, and publications.

Skills

OWASP Top 10

CWE Top 25

Penetration testing

Secure development

LLM security automation

Java

Go

Python

C/C++

OIDC SAML OAuth

Threat modeling

Tools

SAST

DAST

SCA

Fuzzing tools

Job description

Okta, Inc. in Canada is seeking a Staff Product Security Engineer to safeguard Okta’s products through security reviews, threat modeling, code reviews, and penetration testing. You’ll guide engineering teams in secure development and automate security processes.

The role requires deep expertise in authentication protocols (SAML, OAuth, OIDC), threat modeling, and securing AI-integrated software architectures, including LLMs. Hybrid work in Canada, salary 141k–193k USD plus benefits.