Description
We are seeking a technical, research-minded Security Engineering Manager to lead security engineering teams within Auth0 Customer Identity.
Your teams' work spans two areas. The first is threat protection: providing general and AI-driven threat intelligence in partnership with Identity Security, and researching how attackers leverage AI, how we build AI-assisted defenses, and how we protect AI workloads across our products, infrastructure, and customer tenants.
The second is software development for security: building micro-services and tooling that secure Customer Identity products and infrastructure, including how secrets are generated, stored, distributed, rotated, and retired.
Responsibilities:
- Hire, lead, coach, and develop globally distributed teams of security engineers (Senior through Staff), building a culture of research discipline, technical excellence, and ownership
- Define and execute a multi-quarter roadmap for your teams, aligned with Customer Identity business goals and Okta's company-wide security strategy, and balance investment and prioritization across them
- Lead the delivery of scalable, reliable micro-services and automation that secure Customer Identity products and infrastructure, including secrets storage, rotation, access control, auditing, and workload identity
- Drive adoption of secure-by-default secrets handling across Auth0 engineering teams, and reduce the risk from hard-coded, long-lived, or over-privileged credentials
- Research the emerging AI threat landscape and translate it into a forward-looking (12–24 month) view of what we need to protect ourselves and our customers from, then prioritize investments in detection, tooling, and protections to get there
- Direct research and protections against emerging general and AI-driven security threats targeting Auth0 and Auth0's customers , including traditional identity attacks as well as adversarial ML, prompt injection, abuse of agentic protocols (MCP, A2A, UCP), and data poisoning , as they apply to identity systems and customer tenants
- Guide the review and hardening of Auth0's AI security offering, using analysis of past incidents to drive improvements such as new detection signals, heuristic updates, and data labeling enhancements, while identifying gaps and recommending mitigations before they're exploited
- Partner with the identity security teams to help customers strengthen their own tenant security posture through comprehensive defenses and security countermeasures
- Partner across Product, Engineering, and Identity Security leadership to turn research into shipped protections for customer tenants, both proactively (hardening posture before an attack) and during active incidents (accelerating detection, triage, and response)
- Drive adoption of scalable security solutions and automation that operationalize threat defenses and secrets protections at scale
- Own and influence high-impact security architecture decisions across Auth0 and Okta Customer Identity infrastructure to support long-term threat resilience
- Collaborate with the Okta Security team on security operations and, where relevant, support investigations, root cause analysis, and remediation
- Advise stakeholders on mitigation strategies for security risks, including end-of-life software and vulnerabilities, in support of the teams that own patching
- Communicate risk, progress, and trade-offs clearly to senior leadership, and turn research into clear guidance for engineering and product teams
- Manage team health, prioritization, and delivery across time zones, including India