Staff Product Security Engineer, PSIRT

Okta; Dublin; On-site; EUR 74,000 - 101,000; Full time

Job summary

Okta is seeking a Staff Product Security Engineer, PSIRT, to strengthen its product security program in a leadership role. You will own and improve incident response, vulnerability coordination, and security disclosures across Okta’s products, working with cross-functional teams to reduce risk.

You will mentor engineers, collaborate with engineering, IT, product, legal, and security, and help drive proactive threat detection in a fast-paced cloud environment.

Qualifications

• 6+ years of experience in Information Security focusing on Product Security, Application Security, Vulnerability Management and Security Operations.
• Experience conducting security code reviews to identify vulnerabilities and code flaws.
• Experience with incident response for product-related issues and vulnerability remediation.
• Knowledge of risk management and security governance in a product environment.
• Excellent written and verbal communication, with ability to present to executives.

Responsibilities

• Define and implement Okta’s Product Security Incident Response Program for all products and units.
• Manage the bug bounty program operations, researcher engagement, triage, validation, severity, remediation coordination, and process improvements.
• Oversee the full vulnerability lifecycle from discovery to resolution, coordinating with engineering and ensuring timely communication.
• Lead the security disclosure program from triage to public disclosure.
• Produce reports on program health and status; collaborate with teams to improve workflows and risk communication.
• Mentor junior engineers on incident response procedures, investigations, and remediation.
• Partner with leadership to drive proactive threat detection and vulnerability management.

Skills

Security leadership

Product Security

Vulnerability management

Security operations

Bug bounty program management

Responsible disclosure

Cross‑functional collaboration

Incident response

Mentoring juniors

Tools

Incident management tools

Security code review tooling

Job description

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transform how people move through the digital world, putting Identity at the heart of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every box - we’re looking for lifelong learners and people who can improve us with their unique experiences.

Join our team! We’re building a world where Identity belongs to you.

The Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. With the ever‑increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business.

The Staff Product Security Engineer, PSIRT position is crucial in ensuring that Okta’s systems and services meet the highest security standards and align with our customers’ requirements. This position requires leadership, an innovative mindset, and expertise in security operations, responsible disclosure, vulnerability management, and program management. This position is available to candidates in Ireland and Spain.

What You Will Do

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career‑defining work. We're all in on this mission. If you are too, let's talk.

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transform how people move through the digital world, putting Identity at the heart of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every box - we’re looking for lifelong learners and people who can improve us with their unique experiences.

Join our team! We’re building a world where Identity belongs to you.

The Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. With the ever‑increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business.

The Staff Product Security Engineer, PSIRT position is crucial in ensuring that Okta’s systems and services meet the highest security standards and align with our customers’ requirements. This position requires leadership, an innovative mindset, and expertise in security operations, responsible disclosure, vulnerability management, and program management. This position is available to candidates in Ireland and Spain.

What You Will Do

• Responsible for defining, improving, formalizing, and implementing Okta’s Product Security Incident Response Program for all products and business units
• Responsible for the day‑to‑day operations of the bug bounty program, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and program process improvements.
• Oversee the entire lifecycle from discovery to resolution, including triaging, impact assessment, coordination with engineering teams, and validating fixes while ensuring timely communication with internal and external stakeholders
• Lead the overall security disclosure program, from triaging to disclosure
• Report on the health of the program and the overall status of its activities
• Collaborate with internal teams to improve workflows, governance, and communication of vulnerabilities and risks
• Work closely with Engineering, IT, Product, Legal, and Security teams on cross‑functional initiatives
• Mentor and provide guidance to junior engineers on incident response procedures, technical investigations, and vulnerability remediation
• Partner with leadership to drive proactive threat detection and vulnerability management

What You Bring

• 6+ years of experience in Information Security with a focus on Product Security, Application Security, Vulnerability Management, and Security Operations
• Working experience in conducting comprehensive security code reviews to identify vulnerabilities and code flaws
• Working experience in Application Security vulnerabilities
• Working experience in Product Security concepts
• Working experience in risk management
• Working experience in handling incident response for product‑related issues
• Knowledge of incident and log management tools
• Excellent communication and collaboration skills, particularly in technical writing, process documentation, and executive presentations#P25517_3504023

Below is the annual salary range for candidates located in Spain. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and comprehensive healthcare coverage and financial benefits including paid time off and parental leave in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/esp.

The annual base salary range for this position for candidates located in Spain is between:: €74.000 EUR - €101.000 EUR

The Okta Experience

• Supporting Your Well‑Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in‑person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding pleaseuse this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, pleaseclick here to view our full NYC AEDT Notice.