Manager, Customer Identity, Security Engineering

EducationPals; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

EducationPals seeks a leader to guide a globally distributed group of engineers focused on security research and scalable vulnerability discovery. You will define boundaries, evaluate weaknesses across code and configurations, and document findings with repeatable proofs of exploitability.

You will prioritize risks using formal scoring and communicate remediation details to stakeholders. The role emphasizes automation and AI-assisted workflows to scale impact while maintaining rigor.

Responsibilities

• Define research boundaries, legal constraints, and testing permissions before discovery begins.
• Apply manual and automated methods to identify candidate security weaknesses in code, configurations, and protocols.
• Turn raw tool output into confirmed, repeatable vulnerabilities with documented proof.
• Determine whether a bug can violate security properties and estimate real-world risk.
• Prioritize vulnerabilities using structured frameworks and business context.
• Communicate findings to maintainers with enough detail to enable timely remediation.
• Use automated tools and AI assistants to scale discovery while preserving validation rigor.

Job description

You will lead a globally distributed group of talented engineers who share a passion for security and enjoy solving complex problems at scale. This role works closely with and alongside the broader Okta Security team in support of Okta's company-wide security strategy and Okta’s Secure Identity Commitment. You will stay technical enough to challenge designs, evaluate research, review software architecture, and earn the respect of strong engineers, while spending most of your time on leadership:

Relevance is based on skills and concepts, not a guarantee that you qualify.

Coming-soon courses matched to this posting: outline, waitlist, and skill path.

1. Scoping and Authorization for Security Research

Define research boundaries, legal constraints, and testing permissions before discovery begins.

2. Discovery Techniques Across the Attack Surface

Apply manual and automated methods to identify candidate security weaknesses in code, configurations, and protocols.

3. Reproducing and Validating Findings

Turn raw tool output into confirmed, repeatable vulnerabilities with documented proof.

4. Exploitability Analysis and Impact Assessment

Determine whether a bug can violate security properties and estimate real-world risk.

5. Triage and Severity Scoring

Prioritize vulnerabilities using structured frameworks and business context.

6. Responsible Disclosure and Reporting

Communicate findings to maintainers with enough detail to enable timely remediation.

7. Integrating Automation and AI into Research Workflows

Use automated tools and AI assistants to scale discovery while preserving validation rigor.

Other verified postings in the same role family or with overlapping skills.