Staff Product Security Engineer, PSIRT

Okta is looking for a Staff Product Security Engineer, PSIRT to join their team in Barcelona, Spain. As a Staff Product Security Engineer, PSIRT, you will play a crucial role in ensuring that Okta's systems and services meet the highest security standards and align with customers' requirements.

Responsibilities

• Define, improve, formalize, and implement Okta's Product Security Incident Response Program for all products and business units
• Oversee the day-to-day operations of the bug bounty program, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and program process improvements
• Lead the overall security disclosure program, from triaging to disclosure
• Report on the health of the program and the overall status of its activities
• Collaborate with internal teams to improve workflows, governance, and communication of vulnerabilities and risks
• Work closely with Engineering, IT, Product, Legal, and Security teams on cross-functional initiatives
• Mentor and provide guidance to junior engineers on incident response procedures, technical investigations, and vulnerability remediation
• Partner with leadership to drive proactive threat detection and vulnerability management

Requirements

• 6+ years of experience in Information Security with a focus on Product Security, Application Security, Vulnerability Management, and Security Operations
• Working experience in conducting comprehensive security code reviews to identify vulnerabilities and code flaws
• Working experience in Application Security vulnerabilities
• Working experience in Product Security concepts
• Working experience in risk management
• Working experience in handling incident response for product-related issues
• Knowledge of incident and log management tools
• Excellent communication and collaboration skills, particularly in technical writing, process documentation, and executive presentations