Senior Product Security Engineer, Okta
Software Supply Chain Security
Management platform securing resources from cloud to ground
Open for applications
Management platform securing resources from cloud to ground
1001+ employees
Open for applications
1001+ employees
Company mission
To improve the connections between people and tools to make companies more productive and secure.
Role
Who you are
- The ideal candidate has strong Application Security knowledge, alongside a hands–on experience with automation through custom code
- At least 3-5 years of experience in Application Security with a strong focus on security automation and application security at scale
- Knowledge of modern web application vulnerabilities and remediations (e.g., OWASP Top 10, CWE Top 25)
- Functional knowledge of security code reviews (Java, .Net, Go, C, C++, C#, Ruby, Perl, Python, etc.). You should be able to read code and identify, explain, and propose. remediations for the most common vulnerabilities in, at least, code bases for web applications in one of the languages listed
- Software development experience in Python; or similar languages and being open to learning Python
- Experience with commercial or open-source security scanners in the SCA space, or provable experience implementing hardening measures for SDLC pipelines
- Knowledge of at least one of AWS, GCP, Azure, etc
- Experience with CI/CD pipelines, either on-prem or cloud
- Bachelor's degree in Computer Science, Computer Engineering, or equivalent experience
- Industry certifications related to Application and Network Security, are a plus
What the job involves
- We are looking for a talented Security Engineer to join our Software Supply Chain Security Team and help us enhance our application security program
- As a Product Security Engineer, you will contribute to the security of various aspects of Okta's Software Supply Chain Security posture, implement services, and define processes that mitigate risk in this space
- Implement automation, contributing to the implementation of internal, in-house developed systems to implement Okta specific requirements related to application vulnerability identification, tracking and reporting
- Participate in weekly rotations to support our Engineering team when triaging and remediating findings related to the team's initiatives
- Contribute to the definition of internal processes that allow for fast delivery of software to production systems through CI/CD pipelines while meeting security quality criteria with minimal effort
- Contribute to the team's strategy and planning, capitalizing on their security knowledge and the identification and prioritization of risk affecting Okta products
- This role will report to the Manager of Software Supply Chain Security, and will work closely with other members of the DevSecOps team
Our take
Okta started off as an identity company where organisations, large and small, could tap into the company to have a single sign-on interface to access all cloud applications now centralised. Okta has since expanded to provide identity management at the device as well as the server level.
The new approach towards network security is increasingly based on identification and authentication, and Okta is on track to become the go-to vendor in the space. They aim to do so by developing products that enable people to access applications and other tools more smoothly and securely than ever before.
Okta has taken strides towards expansion through significant employee growth and shuffling executive leadership. The company has also made lateral moves such as tackling governance concerns, opening up new paths for revenue.
Freddie
Company Specialist at Welcome to the Jungle
Insights
19% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2015
$75m
SERIES F
Jun 2014
$75m
SERIES E
Total funding: $229.3m
Company benefits
- Work from home opportunities
- Health + Wellness
- Financial Benefits
- Pay + Incentives
- Time Off
- Everyday Living
- Resources
Company HQ
The East Cut, San Francisco, CA
Leadership
Todd McKinnon
(CEO)VP of Development at Salesforce.com and has nearly a decade of experience in various engineering and leadership roles at PeopleSoft.
Frederic Kerrest
(Vice Chairman)Worked in Sales and Business Development at Salesforce.com, and previously co-founded high-tech consulting firm Meridian Global Solutions.
Share this job
View 111 more jobs at Okta