Senior Enterprise Security Engineer, Okta

• Preferred experience with enterprise security tools for API Security Posture Management, SSPM (SaaS Secure Posture Management), Identity Security Posture Management (ISPM), Unified Vulnerability Management (custom-built), Cyber Asset Attack Surface Management (CAASM), Cloud Asset Monitoring (cloudquery), DLP (Data Loss Prevention), Endpoint Detection and Response (EDR), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP)
• The ideal candidate should have a proven track record of automating cloud-first solutions and be comfortable communicating with support staff, technical leadership, and management
• The most important quality is an innate desire to make tools and people work together to solve complex problems with expertise, creativity, and a security-first mindset
• 5+ years experience securing corporate SaaS applications (Salesforce, Google Workspace, Slack)
• 3+ years experience working with enterprise security solutions
• 3+ years experience working in AWS or other cloud environments
• 3+ years experience with a modern scripting language (Python preferred)
• Experience providing security guidance and mitigations to teams
• Experience evaluating third-party software solutions
• Strong written and verbal communication skills
• A streamlined approach to meeting objectives in line with Okta's Secure Identity Commitment

Desirable

• Join Okta’s Enterprise Security team as a senior engineer
• You’ll work closely with the Security, Business Technology and our Product Security teams to safeguard Okta’s endpoints, specifically our SaaS applications, API integrations, and Browser Plugins
• You’ll use your skills in IT, security, and development to build, automate, secure, test, and operationalize solutions that achieve security and business objectives
• Collaborate with security architecture to design and evaluate solutions and processes for end-to-end SaaS security architecture
• Own the implementation of relevant SaaS security solutions
• Build and automate security checks for desktop applications, SaaS solutions, APIs (machine-to-machine) and browser plugins
• Automate continuous posture checks into permission scope for third-party applications and business-critical systems
• Own relationships with internal teams and contribute to asset and data discovery initiatives, risk assessment, security control contextualization, vulnerability triage, and mitigation
• Work with internal stakeholders and vendors to evaluate new SaaS solutions before they are deployed or critical changes are made to existing SaaS solutions
• Follow timezone-specific on-call schedules to respond to requests from incident response, GRC, IT, and end-users
• Build and update custom automation to support the team’s workflows
• Stay updated on emerging security solutions and tools