Staff Security Engineer, DevSecOps & Posture Automation

Okta; San Francisco (CA); On-site; USD 134,000 - 185,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k)

Flexible spending account

Paid leave

Job summary

Okta is seeking a highly skilled Staff Security Engineer focused on DevSecOps and issue management within the TDI Security team. The role is embedded in technical environments to strengthen security across cloud, infrastructure, and business systems, building centralized posture analytics and automating remediation workflows.

You will partner with Security, TDI SRE, and engineering teams to implement scalable agentic security controls, drive secure coding, and support SDL adoption.

Qualifications

• 10+ years of experience in Security Engineering, DevSecOps, Infrastructure Security, or SaaS apps in a SaaS or enterprise environment.
• Hands-on experience with scanning, patching, and remediation across cloud and SaaS ecosystems.
• Proven ability to mentor developers and drive remediation velocity.
• Strong knowledge of secure SDLC/PDLC, supply chain security, and secrets management.

Responsibilities

• Expand and operationalize the Security Posture Management program with dashboards and metrics.
• Configure and operationalize tools like Snyk, Semgrep and Qualys to expand scanning coverage.
• Lead shift-left security efforts across the SDLC and enforce prod-sec practices.
• Develop agentic automation for posture scanning, remediation, and patch validation.
• Partner with Security and GRC to communicate risk posture and remediation status.

Skills

Security engineering

DevSecOps

Infrastructure security

SaaS security

Threat analysis

AWS security

Mentoring

Tools

Snyk

Semgrep

Qualys

ISPM/SSPM

Dashboards/BI tools

Job description

Okta is seeking a highly skilled Staff Security Engineer focused on DevSecOps and issue management within the TDI Security team. The role is embedded in technical environments to strengthen security across cloud, infrastructure, and business systems, building centralized posture analytics and automating remediation workflows.

You will partner with Security, TDI SRE, and engineering teams to implement scalable agentic security controls, drive secure coding, and support SDL adoption.