Staff Product Security Engineer: AI Identity Security Leader

Okta; Bellevue (WA); On-site; USD 161,000 - 221,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) plan

Flexible spending account

Paid leave including PTO and parental leave

Job summary

Okta is looking for a Staff Product Security Engineer to safeguard its products through comprehensive security reviews and secure practices. This role emphasizes a deep technical understanding of web applications and secure design principles. The ideal candidate will have expertise in authentication protocols and be proficient in multiple programming languages.

Success in this role includes conducting penetration testing, mentoring engineers, and representing Okta in security research presentations. This is an opportunity for impactful work and being part of a forward-thinking team.

Qualifications

• Expertise in identifying OWASP Top 10 vulnerabilities through manual code review.
• Strong experience in penetration testing and secure development practices.
• Ability to automate security testing using LLMs and scripting.

Responsibilities

• Conduct security reviews, including design reviews and penetration testing.
• Perform manual secure code reviews across multiple programming languages.
• Identify and mitigate security vulnerabilities, providing guidance to teams.
• Lead product security incidents and assess risks.

Skills

OWASP Top 10 vulnerabilities identification

Penetration testing

Secure development practices

Large Language Models (LLMs)

Programming languages (Java, Go, Python, C/C++)

Authentication protocols (OIDC, SAML, OAuth)

Automation scripting (Python, Bash)

Security incident leadership

Tools

SAST/DAST/SCA tools

Fuzzing tools

Cryptographic knowledge

Job description

Okta is looking for a Staff Product Security Engineer to safeguard its products through comprehensive security reviews and secure practices. This role emphasizes a deep technical understanding of web applications and secure design principles. The ideal candidate will have expertise in authentication protocols and be proficient in multiple programming languages.

Success in this role includes conducting penetration testing, mentoring engineers, and representing Okta in security research presentations. This is an opportunity for impactful work and being part of a forward-thinking team.