Staff Offensive Security Engineer - AI & IAM Security

Okta Inc.; Dublin; Presencial; EUR 90.000 - 123.000; Jornada completa

Descripción de la vacante

Okta is seeking a Staff Product Security Engineer in the Offensive Security Team to advance the security of its products, services, and infrastructure. This senior role requires an attacker mindset, deep expertise in application, cloud, and identity security, and a track record of building scalable offensive tooling.

The ideal candidate will test authentication protocols (SAML, OAuth 2.0, OIDC), perform comprehensive pentests, and develop novel attack techniques against AI-integrated systems

Formación

• Penetration testing of web applications, infrastructure and networks (5+ years preferred).
• Extensive experience testing identity/IAM platforms, multi-tenant SaaS architectures, or authentication/authorization systems.
• Familiarity with AI/LLM security risks and developing offensive techniques against AI-integrated systems.
• Track record of building and shipping offensive security tooling beyond ad-hoc scripts.
• Experience operating within and securing cloud environments (GCP required).
• Familiarity with Threat Modeling concepts and frameworks.
• Experience with Infrastructure as Code (e.g., Terraform) for building/testing environments.
• Solid understanding of modern cryptographic principles and their application.
• Ability to think strategically and develop comprehensive attack scenarios.
• Effective communication skills for conveying vulnerabilities to varied audiences.
• Proactive approach to learning about emerging threats and developing new security techniques.
• Experience or interest in mentoring and sharing knowledge with team members.

Responsabilidades

• Apply an attacker mindset to identify, plan, and exploit security gaps across app, cloud, and network layers.
• Conduct targeted security assessments and pentests; deliver actionable findings and remediation guidance.
• Assess security of AI/LLM-integrated features and agent-based workflows and evaluate defensive controls.
• Design, build, and maintain offensive automation frameworks to scale security coverage.
• Act as a security SME across internal teams and represent Okta in forums when appropriate.
• Periodically triage internal vulnerability tickets and external bug bounty submissions.

Descripción del empleo

Okta is seeking a Staff Product Security Engineer in the Offensive Security Team to advance the security of its products, services, and infrastructure. This senior role requires an attacker mindset, deep expertise in application, cloud, and identity security, and a track record of building scalable offensive tooling.

The ideal candidate will test authentication protocols (SAML, OAuth 2.0, OIDC), perform comprehensive pentests, and develop novel attack techniques against AI-integrated systems