Staff Security Engineer - DevSecOps & Vulnerability Lead

ISC2 East Bay Chapter; San Francisco (CA); On-site; USD 132,000 - 222,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k)

Paid leave

Job summary

Okta is seeking a highly skilled Security Engineer with a DevSecOps focus to strengthen vulnerability management across infrastructure, cloud, and business systems. You will embed with engineering and operations teams to drive secure design, automate scanning, and mentor teams to improve remediation velocity.

You will lead hands-on remediation, deploy tooling, and collaborate with GRC to integrate findings into risk management.

Qualifications

• 10+ years of experience in Security Engineering, DevSecOps, or Infrastructure Security within a SaaS or enterprise environment.
• Hands-on expertise in vulnerability scanning, patching, and remediation across cloud, endpoint, and SaaS ecosystems.
• Experience deploying and managing Snyk, Semgrep, and Qualys tools.
• Strong knowledge of AWS security practices, SRE principles, and securing business tech stacks (Salesforce, ERP, Google Workspace, Slack, Zoom).
• Proven ability to coach, mentor, and collaborate with development teams to improve remediation velocity.
• Practical understanding of secure SDLC / PDLC, supply chain security, and secrets management.

Responsibilities

• Lead hands-on vulnerability remediation efforts across endpoints (Mac/Windows), cloud workloads, and on-prem assets.
• Deploy, configure, and operationalize tools such as Snyk, Semgrep, and Qualys to expand scanning coverage for all assets.
• Collaborate with teams to troubleshoot and remediate findings; provide technical mentorship to developers and admins.
• Improve vulnerability metrics, reporting, and visibility to drive accountability and risk reduction.
• Partner with GRC to integrate findings into the risk register and ensure timely remediation or risk acceptance.
• Embed within product and engineering teams to advise on secure coding, build pipelines, and deployment best practices.
• Support ProdSec SDL adoption across business units, standardizing design reviews and requirements gathering.
• Implement secrets rotation automation and best practices for secrets management across TDI systems.
• Lead the Security Champions initiative—mentoring developers and SREs on proactive risk mitigation.

Skills

Security Engineering

DevSecOps

Vulnerability remediation

Cloud security

AWS security

SRE principles

Mentoring

Secure SDLC

Tools

Snyk

Semgrep

Qualys

Job description

Okta is seeking a highly skilled Security Engineer with a DevSecOps focus to strengthen vulnerability management across infrastructure, cloud, and business systems. You will embed with engineering and operations teams to drive secure design, automate scanning, and mentor teams to improve remediation velocity.

You will lead hands-on remediation, deploy tooling, and collaborate with GRC to integrate findings into risk management.