Staff Product Security Engineer, Offensive Security, Okta
$141-211k
+ Equity + Bonus
Management platform securing resources from cloud to ground
Be an early applicant
Management platform securing resources from cloud to ground
1001+ employees
Be an early applicant
$141-211k
+ Equity + Bonus
1001+ employees
Company mission
To improve the connections between people and tools to make companies more productive and secure.
Role
Who you are
- Demonstrable experience in penetration testing web applications and infrastructure (5+ years preferred)
- Strong expertise in securing cloud environments (AWS, GCP, Azure)
- Proven ability to identify and demonstrate security vulnerabilities in infrastructure
- Familiarity with Threat Modeling concepts and frameworks
- Experience with Infrastructure as Code (e.g., Terraform) for building and testing environments
- Solid understanding of modern cryptographic principles and their application
- Experience in automating security testing and streamlining offensive tasks
- Ability to think strategically and develop comprehensive attack scenarios
- Effective communication skills for conveying technical security findings to various audiences
- A proactive approach to learning about emerging threats and developing new security techniques
- Experience or interest in mentoring and sharing knowledge with team members
- Cloud Security: In-depth knowledge of AWS security architecture, services, and common attack vectors, with a proven ability to compromise AWS Compute resources. Experience with Google Cloud Compute and Azure is highly desirable
- Operating Systems: Deep familiarity with Linux and macOS operating systems, including their security features, command-line tools, and common attack surfaces
- Application Security: Strong understanding of application security principles, common vulnerabilities (OWASP Top 10, etc.), and backend testing methodologies and techniques
- Authentication Protocols: Familiarity with various authentication and authorization mechanisms, such as SAML, OAuth 2.0, and OIDC, and their associated security considerations
- Automation and Tooling: A strong desire and proven ability to automate security tasks and develop custom tooling to facilitate security reviews and pentesting
- TechOps: Experience with TechOps tooling and processes, such as Chef, Kubernetes, Terraform, and ArgoCD, enabling a comprehensive understanding of the operational environment
- Communication: Excellent written and verbal communication skills with the ability to clearly and concisely articulate vulnerabilities and remediation strategies to technical and non-technical audiences
What the job involves
- The Offensive Security Team, part of Product Security, actively assesses the security of Okta's products, services, and infrastructure, and we are seeking a highly technical and driven staff-level engineer to contribute to this effort
- This role demands more than running vulnerability scans
- Excelling here requires a thorough understanding of offensive security testing and a strong drive to identify and leverage security weaknesses
- Above all, the most critical attribute of this role is an innate ability to think and operate as a sophisticated adversary
- This skill is key to solving security challenges with deep technical expertise and creativity
- Apply attacker mindset to identify, plan, and exploit complex security gaps across app, cloud, and network layers
- Conduct targeted security assessments and pentests; deliver actionable findings, detailed exploit recreation, and architectural remediation guidance
- Act as a security SME across internal teams and represent Okta in internal and external forums when appropriate
- Design and deploy disposable, repeatable, verifiable automation and infrastructure to support rapid, on-demand security engagements
- Periodically triage internal vulnerability tickets and external bug bounty submissions
- As needed, design and deploy tooling, automation, or infrastructure to support security engagements
Application process
- Some roles may require travel to one of our office locations for in-person onboarding
Our take
Okta started off as an identity company where organisations, large and small, could tap into the company to have a single sign-on interface to access all cloud applications now centralised. Okta has since expanded to provide identity management at the device as well as the server level.
The new approach towards network security is increasingly based on identification and authentication, and Okta is on track to become the go-to vendor in the space. They aim to do so by developing products that enable people to access applications and other tools more smoothly and securely than ever before.
Okta has taken strides towards expansion through significant employee growth and shuffling executive leadership. The company has also made lateral moves such as tackling governance concerns, opening up new paths for revenue.
Freddie
Company Specialist at Welcome to the Jungle
Insights
19% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2015
$75m
SERIES F
Jun 2014
$75m
SERIES E
Total funding: $229.3m
Company benefits
- Work from home opportunities
- Health + Wellness
- Financial Benefits
- Pay + Incentives
- Time Off
- Everyday Living
- Resources
Company HQ
The East Cut, San Francisco, CA
Leadership
Todd McKinnon
(CEO)VP of Development at Salesforce.com and has nearly a decade of experience in various engineering and leadership roles at PeopleSoft.
Frederic Kerrest
(Vice Chairman)Worked in Sales and Business Development at Salesforce.com, and previously co-founded high-tech consulting firm Meridian Global Solutions.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 95 more jobs at Okta