Senior Product Security Engineer, PSIRT

The Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business.

The Senior Product Security Engineer, PSIRT role drives, guides, and defines the overarching process and policies to handle Okta’s Product Security Incident Response program. 

The Senior Product Security Engineer, PSIRT position is crucial in ensuring that Okta’s systems and services meet the highest security standards and align with our customers’ requirements. This position requires expertise in security operations, responsible disclosure, vulnerability management, and program management.

What You Will Do

• Responsible for defining, improving, formalizing, and implementing Okta’s Product Security Incident Response Program for all products and business units
• Lead the overall security disclosure program, from triaging to disclosure
• Report on the health of the program and the overall status of its activities
• Collaborate with internal teams to improve workflows, governance, and communication of vulnerabilities and risks
• Work closely with Engineering, IT, Product, Legal, and Security teams on cross-functional initiatives

What You Bring

• 4+ years of experience in Information Security with a focus on Product Security, Application Security, Vulnerability Management, and Security Operations
• Working experience in conducting comprehensive security code reviews to identify vulnerabilities and code flaws
• Working experience in Product Security concepts
• Working experience in risk management
• Working experience in handling incident response for product-related issues
• Knowledge of incident and log management tools
• Excellent communication and collaboration skills, particularly in technical writing, process documentation, and executive presentations

#LI-Remote

#LI-JP3