Staff Product Security Engineer, Offensive Security Team

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI.

The Offensive Security Team, part of Product Security at Okta, actively assesses the security of Okta's products, services, and infrastructure, and we are seeking a highly technical and driven staff-level engineer to contribute to this effort.

Responsibilities

• Apply an attacker mindset to identify, plan, and exploit complex security gaps across app, cloud, and network layers.
• Conduct targeted security assessments and pentests; deliver actionable findings, detailed exploit recreation, and architectural remediation guidance.
• Assess the security of AI/LLM-integrated features and agent-based workflows, develop novel attack techniques, and evaluate defensive controls.
• Design, build, and maintain offensive automation frameworks that scale security coverage from custom fuzzers and scanners to pipeline-integrated validation tools.
• Act as a security SME across internal teams and represent Okta in internal and external forums when appropriate.
• Periodically triage internal vulnerability tickets and external bug bounty submissions.

Requirements

• Demonstrable experience in penetration testing web applications, related infrastructure, and networks (5+ years preferred)
• Extensive experience testing identity/IAM platforms, multi-tenant SaaS architectures, or authentication/authorization systems
• Familiarity with AI/LLM security risks and experience or strong interest in developing offensive techniques against AI-integrated systems
• Track record of building and shipping offensive security tooling beyond ad-hoc scripts
• Experience in operating within and securing cloud environments (GCP required)
• Familiarity with Threat Modeling concepts and frameworks
• Experience with Infrastructure as Code (e.g., Terraform) for building and testing environments
• Solid understanding of modern cryptographic principles and their application
• Ability to think strategically and develop comprehensive attack scenarios
• Effective communication skills for conveying technical security findings to various audiences
• A proactive approach to learning about emerging threats and developing new security techniques
• Experience or interest in mentoring and sharing knowledge with team members

Benefits

• Annual base salary range: €90,000-€123,200 EUR
• Equity (where applicable)
• Bonus
• Comprehensive healthcare coverage and financial benefits including paid time off and parental leave