Staff Product Security Engineer, Reviews
Ai Security
Api Security
Application Security
Cybersecurity Tools
Dynamic Application Security Testing
Engineer
Engineering
Identity and Access Management
Incident Response
Information Security
InfoSec
Security
Security As Code
Security Assurance
Security Automation
Security Testing
Software Security
Job Description
Okta is seeking a Staff Product Security Engineer to lead security reviews, guide secure development practices, and shepherd remediation for externally reported vulnerabilities across its product portfolio. Based in San Francisco with a hybrid work arrangement, this role combines hands-on security assessment, code reviews, and architectural security evaluations to strengthen the security of Okta’s offerings.
Responsibilities
- Lead security reviews for new features and major changes, including design assessments, threat modeling, and penetration testing.
- Perform manual secure code reviews across multiple programming languages.
- Identify and mitigate security vulnerabilities, delivering clear remediation guidance to engineering teams.
- Lead product security incidents, evaluate risk, and drive remediation efforts.
- Develop security tooling and automation to improve vulnerability detection and assessment.
- Mentor junior engineers and provide guidance to non-security staff on secure development practices.
- Represent Okta externally through security research, conference talks, and publications.
Requirements
- Proven ability to identify OWASP Top 10 and CWE Top 25 vulnerabilities via manual code review.
- Strong experience in penetration testing and secure development practices.
- Deep technical background in assessing Large Language Models (LLMs) and securing AI-integrated software architectures.
- Proficiency in multiple programming languages including Java, Go, Python, and C/C++.
- Solid understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
- Excellent communication skills to articulate risks and remediation to developers and leadership.
- Ability to automate security testing using LLMs and scripting (Python, Bash, etc.).
- Experience leading security incidents and risk assessments.
Technologies
- Java
- Go
- Python
- C/C++
- OIDC
- SAML
- OAuth
- Large Language Models (LLMs)
- SAST
- DAST
- SCA
- Fuzzing tools
Compensation
Salary: USD 180,000 - 247,500 per year
Benefits
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
The Okta Experience
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
Similar Jobs
