Staff AI Product Security Engineer

Okta; Chicago (IL); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta is hiring a Staff AI Product Security Engineer to push the boundaries of AI-powered security. You will research frontier LLMs, build AI-assisted tooling, and perform deep security reviews of Okta’s products and AI pipelines.

You will craft domain-specific defenses, publish findings, and help engineering teams secure AI features across the platform. This is a hybrid research/engineering role with strong emphasis on practical impact.

Qualifications

• 8+ years in information security or AI/ML security.
• Experience building security tooling and automation used by engineers.
• Strong offensive mindset with ability to model adversarial behavior.
• Hands-on experience with LLM-integrated systems and vulnerabilities.
• Proficiency in Python and at least one of Go, Java, TypeScript, C/C++.

Responsibilities

• Lead capability research evaluating frontier LLMs and models for code analysis.
• Engineer AI-assisted security tools that automate vulnerability discovery and triage.
• Architect code-repair engines that suggest verified fixes to developers.
• Build PoC exploit generators in sandboxed runtimes for root-cause analysis.
• Fine-tune open-source models for domain-specific security tasks.
• Embed AI models and APIs across Product Security tools to scale defense.
• Perform manual reviews and security deep dives of Okta's products.
• Develop threat models for agentic architectures and LLM-integrated services.
• Publish external research and share defensible security guidance.
• Design benchmarking harnesses for AI security tools and conduct evaluations.

Skills

Information security

Security tooling

Offensive security

LLM security

Python

Go/Java/TypeScript

Tools

Docker

Sandboxing

Job description

Okta is hiring a Staff AI Product Security Engineer to push the boundaries of AI-powered security. You will research frontier LLMs, build AI-assisted tooling, and perform deep security reviews of Okta’s products and AI pipelines.

You will craft domain-specific defenses, publish findings, and help engineering teams secure AI features across the platform. This is a hybrid research/engineering role with strong emphasis on practical impact.