Staff Product Security Engineer, Offensive Security

Okta; Toronto; On-site; CAD 141,000 - 211,000; Full time

Job summary

An innovative company is seeking a Staff Product Security Engineer to join its Offensive Security Team. This role focuses on identifying and exploiting security gaps across various layers, conducting security assessments, and designing automation for security engagements. The ideal candidate will have extensive experience in penetration testing, cloud security, and effective communication skills. The organization offers a dynamic work environment with flexible arrangements, emphasizing talent development and social impact. Join a forward-thinking team that values diverse perspectives and continuous learning.

Qualifications

• 5+ years in penetration testing web applications and infrastructure.
• Expertise in securing cloud environments (AWS, GCP, Azure).
• Effective communication skills to articulate vulnerabilities.

Responsibilities

• Identify and exploit security gaps across app, cloud, and network layers.
• Conduct security assessments and provide actionable findings.
• Design automation and infrastructure for security engagements.

Skills

Cloud Security

Penetration Testing

Application Security

Automation and Tooling

Effective Communication

Tools

Terraform

Kubernetes

Chef

ArgoCD

Job description

Staff Product Security Engineer, Offensive Security

Join to apply for the Staff Product Security Engineer, Offensive Security role at Okta.

At Okta, we celebrate diverse perspectives and experiences. We seek lifelong learners who can contribute their unique insights to improve our team.

The Offensive Security Team, part of Product Security, actively assesses the security of Okta's products, services, and infrastructure. We are looking for a highly technical, driven staff-level engineer with a deep understanding of offensive security testing and a strong ability to think like a sophisticated adversary. This role requires technical expertise, creativity, and a proactive approach to security challenges.

The ideal candidate will have expertise in:

• Cloud Security: AWS, Google Cloud, Azure
• Operating Systems: Linux, macOS
• Application Security: OWASP Top 10, backend testing
• Authentication Protocols: SAML, OAuth 2.0, OIDC
• Automation and Tooling
• TechOps tools: Chef, Kubernetes, Terraform, ArgoCD
• Communication skills for articulating vulnerabilities and remediation strategies

What You Will Do

• Identify and exploit security gaps across app, cloud, and network layers.
• Conduct security assessments and pentests, providing actionable findings and remediation guidance.
• Act as a security SME and represent Okta in forums.
• Design automation and infrastructure for security engagements.
• Triage vulnerability tickets and bug bounty submissions.
• Develop tooling and automation as needed.

What You Bring

• 5+ years experience in penetration testing web applications and infrastructure.
• Expertise in securing cloud environments (AWS, GCP, Azure).
• Ability to identify and demonstrate security vulnerabilities.
• Knowledge of Threat Modeling frameworks.
• Experience with Infrastructure as Code (Terraform).
• Understanding of cryptographic principles.
• Experience automating security testing.
• Strategic thinking in attack scenario development.
• Effective communication skills.
• Proactive learning about emerging threats.
• Interest or experience in mentoring.

The annual salary range in Canada is $141,000—$211,000 CAD, plus benefits, equity, and bonus. Learn more about our Total Rewards.

We offer a dynamic work environment, flexible work arrangements, and opportunities for social impact and talent development. Find your place at Okta: https://www.okta.com/company/careers/.

Some roles may require travel for onboarding. Okta is an Equal Opportunity Employer and provides accommodations for applicants with disabilities.