Staff Product Security Engineer: AI Identity Security Leader

Okta; Washington (District of Columbia); On-site; USD 161,000 - 221,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) and flexible spending account

Paid leave including PTO and parental leave

Job summary

Okta is seeking a Staff Product Security Engineer based in Washington, DC. The role involves conducting comprehensive security reviews, guiding engineering teams, and managing retention strategies for vulnerabilities. Candidates should have expertise in authentication protocols and a background in security testing methodologies, as well as a desire to automate security processes.

The ideal candidate will demonstrate strong communication skills to convey risks and solutions effectively. A solid technical background is required for this impactful role, focusing on both product security and AI integration.

Qualifications

• Expertise in identifying vulnerabilities through manual code review.
• Strong experience in security reviews and threat modeling.
• Ability to communicate risks and remediation strategies effectively.

Responsibilities

• Conduct security reviews for new features and major changes.
• Perform manual secure code reviews across multiple languages.
• Identify and mitigate security vulnerabilities in products.
• Lead product security incidents and remediation efforts.
• Develop automation tools for security assessments.

Skills

Authentication protocols (SAML, OAuth, OIDC)

Penetration testing

Secure development practices

Automation of security processes

Communication skills

Tools

Java

Go

Python

C/C++

Job description

Okta is seeking a Staff Product Security Engineer based in Washington, DC. The role involves conducting comprehensive security reviews, guiding engineering teams, and managing retention strategies for vulnerabilities. Candidates should have expertise in authentication protocols and a background in security testing methodologies, as well as a desire to automate security processes.

The ideal candidate will demonstrate strong communication skills to convey risks and solutions effectively. A solid technical background is required for this impactful role, focusing on both product security and AI integration.