Staff Enterprise Security Engineer, Okta

• Preferred experience with enterprise security tools for API Security Posture Management, SSPM (SaaS Secure Posture Management), Identity Security Posture Management (ISPM), Unified Vulnerability Management (custom-built), Cyber Asset Attack Surface Management (CAASM), Cloud Asset Monitoring (cloudquery), DLP (Data Loss Prevention)
• The ideal candidate should have a proven track record automating solutions utilizing a cloud first approach and be comfortable communicating with support staff, technical leadership, and management
• The most important quality is an innate desire to make tools and people work together solving complex problems with expertise, creativity, and a security first mindset
• 5+ years experience securing corporate SaaS applications (Salesforce, Google Workspace, Slack)
• 5+ years experience in securing APIs and browser extensions
• 3+ years experience working with enterprise security solutions
• 3+ years experience working in AWS or other cloud environments
• 3+ years experience with a modern scripting language (Python preferred)
• Experience providing security guidance and mitigations to teams
• Experience evaluating third party software solutions
• Strong written and verbal communication skills
• A streamlined approach to meeting objectives in line with Okta's Secure Identity Commitment

Desirable

• Collaborate with security architecture to design and evaluate solutions and processes for end-to-end SaaS security architecture
• Own the implementation of relevant SaaS security solutions
• Build and automate security checks for APIs (machine-to-machine) and browser plugins
• Automate continuous posture checks into permission scope for third party applications business-critical systems
• Own relationships with internal teams as a security SME for asset and data discovery, risk assessment, security control contextualisation and vulnerability triage and mitigation
• Work with internal stakeholders and vendors to evaluate new SaaS solutions before they are deployed or critical changes are made to existing SaaS solutions
• Build and update custom automation to support the team’s workflows
• Stay updated on emerging security solutions and tools