Detection & Response Engineer, Okta

• This role is ideal for someone with 2-3 years of experience in security operations, incident response, or security engineering who wants to grow their skills in a fast-paced environment
• You’re a team player
• You have great communications skills and a thirst for knowledge
• You’re curious about systems and how they interact, knowing that to properly defend a system you must first understand how it works
• You enjoy automating tasks and if you can’t find a tool for the job you create one
• You’re calm under pressure and have a good internal compass for taking calculated risks
• If you don’t have a degree, you have equivalent experience that’s given you the foundational knowledge to understand complex computing environments
• People want to work with you
• You want to learn what it takes to build a world-class defensive cyber capability and you’re passionate about helping make ours stronger
• Your experience probably includes:
• Contributing to technology focused teams large or small
• Continuously learning and taking on opportunities to grow within your role
• Providing support to the incident commander or technical lead during cyber security incidents
• Developing detection logic and automating the triage and response of alerts they generate

Desirable

• In addition to driving security in our enterprise environment and Okta service, the Security team is deeply entrenched in the Okta business
• The team contributes to product roadmaps, promoting trust, research and other strategic aspects of Okta’s operations. We work across multiple functions, business partners and the research community
• We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape
• Okta is seeking a Detection and Response Engineer to take on a hands-on role within Okta’s Cyber Defense team, reporting to the Senior Manager of Defensive Cyber Operations (Americas)
• In this role you will work to continuously improve Okta’s threat detection and response capabilities collaborating closely with security engineers and cross functional teams
• Develop and refine security detections across Okta’s infrastructure and applications ensuring optimal coverage across the organization
• Create high-fidelity alerts that balance security visibility with operational efficiency
• Work with detection & response engineers to tune detections, reduce false positives, and enhance response workflows
• Assist in the Investigation and response to security incidents, working to quickly contain and remediate threats
• Take part in the DCO watch roster triaging alerts escalated via automated processes, internal reports, and third-party notifications
• Participate in forensic analysis of security events, logs, and endpoints to determine root causes
• Document investigation findings and contribute to post-incident reviews
• Support automation efforts by writing scripts and integrating security tools to improve response workflows
• Assist in developing security playbooks and automating repetitive tasks in security operations
• Learn and work with APIs to enhance security telemetry and detection capabilities
• Work closely with senior engineers and analysts to improve security operations and enhance Okta’s detection and response capabilities
• Stay up to date on the latest cybersecurity threats, attack techniques, and industry best practices
• Participate in tabletop exercises, and adversarial engineering engagements