Staff Product Security Engineer, Reviews
Job Description
Okta is seeking a Staff Product Security Engineer focused on Reviews to guide security reviews, threat modeling, code reviews, and vulnerability handling across features while supporting secure development and incident response.
Responsibilities
- Conduct security reviews including design reviews, threat modeling, and penetration testing for new features and major changes.
- Perform manual secure code reviews across multiple programming languages.
- Identify and mitigate security vulnerabilities, delivering actionable guidance to engineering teams.
- Lead product security incidents, assess risk, and steer remediation efforts.
- Develop security tools and automation to improve vulnerability detection and assessment.
- Mentor junior engineers and advise non-security staff on secure development practices.
- Represent Okta externally through security research, conference talks, and publications.
Requirements
- Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities via manual code review.
- Extensive experience with penetration testing and secure development practices.
- Strong technical background in evaluating Large Language Models and securing AI integrated software architectures.
- Proficiency in multiple programming languages such as Java, Go, Python, and C/C++.
- In-depth understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
- Excellent communication skills to articulate risks and remediation to developers and leadership.
- Ability to automate security testing using LLMs and scripting languages (Python, Bash, etc.).
- Experience leading security incidents and risk assessments.
Technologies
- Java
- Go
- Python
- C/C++
- OIDC
- SAML
- OAuth
- Large Language Models (LLMs)
- SAST
- DAST
- SCA
- fuzzing tools
- Bash
Benefits
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
The Okta Experience
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community