Staff Security Engineer

Okta seeks a hands-on Staff Security Engineer to strengthen security across infrastructure, cloud, and business systems within the TDI Security team, building centralized posture analytics, automating issue tracking and remediation, and advancing secure development with AI-enabled security at scale.

Responsibilities

• Elevate the Security Posture Management program to address issues surfaced by security tooling across the ecosystem.
• Utilize dashboards and visualization tools to reveal vulnerability trends, progress in issue management, and current status.
• Oversee Okta's Security Posture Management program, integrating data ingestion pipelines, prioritizing vulnerability fixes, aiding teams remediating from tools (ISPM, DSPM, Qualys, etc), and building scalable automated systems.
• Configure and expand scanning coverage by deploying tools such as Snyk, Semgrep, and Qualys across all TDI assets.
• Collaborate with cross-functional teams to troubleshoot findings and provide technical mentorship to developers and admins.
• Develop and maintain metrics, reporting, and executive visibility from tools like ISPM/SSPM, Snyk, Semgrep, Qualys, Cyera, and other platforms to drive ownership and risk reduction.
• Partner with Security and GRC to communicate risk posture and remediation status.
• Advise product and engineering teams on secure coding, build pipelines, and deployment best practices.
• Support and enforce ProdSec SDL adoption across business units, standardizing design reviews and requirements gathering.
• Implement secrets rotation automation and best practices for secrets management across TDI systems.
• Lead shift left security initiatives to bake security into the SDLC.
• Collaborate with SRE to manage update pipelines and ensure compliance with baseline standards.
• Perform light Security Architecture Reviews for lower environments to confirm proper controls and data handling.
• Develop agentic automation to scale security posture scanning, reporting, remediation, and patch validation.
• Architect end-to-end automation flows and system designs for an AI agent and its subagents (remediation agent, posture triage agent, etc).
• Identify and close gaps across CSPM, CI/CD pipeline security, and endpoint hardening.
• Provide technical guidance for integrating security into business and productivity platforms (Salesforce, ERP, Google Workspace, Slack, Zoom).

Requirements

• 10+ years of experience in Security Engineering, DevSecOps, Infrastructure Security, or SaaS apps within SaaS or enterprise environments.
• Hands-on expertise in scanning, patching, and remediating issues across cloud and SaaS ecosystems.
• Creative and strategic thinking to promote risk reduction through secure design and simplicity.
• Broad security knowledge enabling connections across multiple security domains.
• Strong ability to collaborate cross-functionally while balancing security requirements with business goals.
• Experience deploying and managing Snyk, Semgrep, and Qualys.
• Solid knowledge of AWS security practices, SRE principles, and securing stacks such as Salesforce, ERP, Google, Slack, and Zoom.
• Proven track record coaching development teams to improve remediation velocity.
• Practical understanding of secure SDLC / PDLC, supply chain security, and secrets management.
• Experience building security tools and automated applications.
• Effective communication skills for strategic conversations with leadership and hands-on contributors; proficient with visualization/BI tools for dashboards and reporting.
• Experience driving remediation across posture-management findings; excellent troubleshooting and proactive, solution-oriented mindset.

Technologies

• Snyk
• Semgrep
• Qualys
• ISPM
• SSPM
• Cyera
• AWS
• Salesforce
• ERP
• Google Workspace
• Slack
• Zoom

Benefits

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community