Staff Product Security Engineer, Reviews

As a Staff Product Security Engineer at Okta, you will play a critical role in safeguarding Okta's products by conducting comprehensive security reviews, guiding engineering teams in secure development practices, and handling externally reported vulnerabilities.

You will engage in code reviews, penetration testing, and architectural security assessments to ensure the security of Okta's platforms and features. This role requires a deep technical understanding of web applications, backend services, penetration testing methodologies, and secure design principles.

Responsibilities:

• Conduct security reviews, including design reviews, threat modeling, and penetration testing of new features and major changes.
• Perform manual secure code reviews across multiple programming languages.
• Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
• Lead product security incidents, assess risks, and drive remediation efforts.
• Develop security tools and automation to improve vulnerability detection and assessment.
• Mentor junior engineers and provide guidance to non-security staff on secure development practices.
• Represent Okta externally through security research, conference talks, and publications.

Requirements:

• Expertise in identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review.
• Strong experience in penetration testing and secure development practices.
• Deep technical background in assessing Large Language Models (LLMs) and securing AI-integrated software architectures.
• Proficiency in multiple programming languages (e.g., Java, Go, Python, C/C++).
• Deep understanding of authentication & authorization protocols (OIDC, SAML, OAuth).
• Strong communication skills to explain risks and remediation to developers and leadership.
• Ability to automate security testing using LLMs and scripting (Python, Bash, etc.).
• Experience leading security incidents and risk assessments.

Benefits:

• Health, dental, and vision insurance
• RRSP with a match
• Healthcare spending
• Telemedicine
• Paid leave (including PTO and parental leave)