Staff Product Security Engineer, PSIRT

Secure Every Identity from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. Were all in on this mission. If you are too lets talk.

Okta is The Worlds Identity Company. We free everyone to safely use any technologyanywhere on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access authentication and automation that transform how people move through the digital world putting Identity at the heart of business security and growth.

At Okta we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every box - were looking for lifelong learners and people who can improve us with their unique experiences.

Join our team! Were building a world where Identity belongs to you.

The Security teams mission is to strengthen Oktas position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees products and most importantly our customers. With the ever-increasing pace of cloud application adoption companies are struggling to find ways to accurately assess risk and act at the speed of their business.

The Staff Product Security Engineer PSIRT position is crucial in ensuring that Oktas systems and services meet the highest security standards and align with our customers requirements. This position requires leadership an innovative mindset and expertise in security operations responsible disclosure vulnerability management and program management. This position is available to candidates in Ireland and Spain.

• Responsible for defining improving formalizing and implementing Oktas Product Security Incident Response Program for all products and business units
• Responsible for the day-to-day operations of the bug bounty program including researcher engagement vulnerability triage and validation severity assessment remediation coordination reward recommendations and program process improvements.
• Oversee the entire lifecycle from discovery to resolution including triaging impact assessment coordination with engineering teams and validating fixes while ensuring timely communication with internal and external stakeholders
• Lead the overall security disclosure program from triaging to disclosure
• Report on the health of the program and the overall status of its activities
• Collaborate with internal teams to improve workflows governance and communication of vulnerabilities and risks
• Work closely with Engineering IT Product Legal and Security teams on cross-functional initiatives
• Mentor and provide guidance to junior engineers on incident response procedures technical investigations and vulnerability remediation
• Partner with leadership to drive proactive threat detection and vulnerability management

• 6 years of experience in Information Security with a focus on Product Security Application Security Vulnerability Management and Security Operations
• Working experience in conducting comprehensive security code reviews to identify vulnerabilities and code flaws
• Working experience in Application Security vulnerabilities
• Working experience in Product Security concepts
• Working experience in risk management
• Working experience in handling incident response for product-related issues
• Knowledge of incident and log management tools
• Excellent communication and collaboration skills particularly in technical writing process documentation and executive presentations
  
  
  #P

Required Experience:

Staff IC