Staff Product Security Engineer: AI Identity Security Leader

Okta; New York (NY); On-site; USD 161,000 - 221,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k)

Paid leave including PTO and parental leave

Job summary

Okta, located in New York City, is looking for a Staff Product Security Engineer to safeguard its products through comprehensive security reviews and guiding secure development practices. This role will conduct penetration testing and identify vulnerabilities while mentoring junior engineers and representing Okta in external research. Essential skills include knowledge of authentication protocols and a deep understanding of AI-integrated software security.

This position offers an innovative environment where your effort will directly align with our mission of securing identities in an evolving digital landscape.

Qualifications

• Expertise in identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review.
• Strong experience in penetration testing and secure development practices.
• Deep technical background in assessing Large Language Models (LLMs) and securing AI-integrated software architectures.

Responsibilities

• Conduct security reviews, including design reviews, threat modeling, and penetration testing of new features and major changes.
• Perform manual secure code reviews across multiple programming languages.
• Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.

Skills

Authentication protocols (SAML, OAuth, OIDC)

Penetration testing

Security tools and automation

Security vulnerability identification

Communication skills

Tools

Python

Java

Go

C/C++

Job description

Okta, located in New York City, is looking for a Staff Product Security Engineer to safeguard its products through comprehensive security reviews and guiding secure development practices. This role will conduct penetration testing and identify vulnerabilities while mentoring junior engineers and representing Okta in external research. Essential skills include knowledge of authentication protocols and a deep understanding of AI-integrated software security.

This position offers an innovative environment where your effort will directly align with our mission of securing identities in an evolving digital landscape.