Staff Product Security Engineer, Okta
Software Supply Chain
CA$141-211k
+ Offers equity (where applicable) & Bonus
Management platform securing resources from cloud to ground
Be an early applicant
Management platform securing resources from cloud to ground
1001+ employees
Be an early applicant
CA$141-211k
+ Offers equity (where applicable) & Bonus
1001+ employees
Company mission
To improve the connections between people and tools to make companies more productive and secure.
Role
Who you are
- The ideal candidate is someone who can think about SDLC security holistically, including aligning with the emerging requirements around Software Transparency and Supply Chain Security
- At least 5-7 years of experience in a similar role with a strong focus on security automation and application security at scale
- Experience with commercial and open-source security scanners in the SCA space, or provable experience implementing hardening measures in SDLC pipelines
- Functional knowledge of security code reviews (Java, .Net, Go, C, C++, C#, Ruby, Perl, Python, etc.). You should be able to read code and identify, explain, and propose remediations for the most common vulnerabilities in, at least, code bases for web applications in one of the languages listed
- Advanced knowledge of network and application security
- Software development experience in Python; or similar languages and being open to learning Python
- Knowledge of at least one of AWS, GCP, Azure, etc
- Experience with CI/CD pipelines, either on-prem or cloud
- Experience defining projects, including goals, resourcing, activities, goals, targets, and milestones, and producing good effort estimations
- Bachelor's degree in Computer Science, Computer Engineering, or equivalent experience
- Industry certifications related to Software Supply Chain Security, or more broadly to Application and Network Security, are a plus
- We are passionate about what we do and strive to create an inclusive and diverse workplace where everyone can thrive. If you are excited about this opportunity and meet the qualifications listed above, we encourage you to apply. We look forward to hearing from you
What the job involves
- We are looking for a talented Security Engineer to join our Software Supply Chain Security Team and help us enhance our application security program
- As a Staff Product Security Engineer, you will be responsible for assessing the security of various aspects of Okta's Software Supply Chain Security posture, generating requirements, implementing services, and contributing to the definition of processes that mitigate risk in this space
- Conducting evaluations of novel tools and techniques that can help secure our products through robust discovery of potential security vulnerabilities
- Designing individual components of our automation architecture through end-to-end and data-driven approaches
- Working with Engineering and other teams in the Security organization to define and execute projects pursuing our security goals
- Contributing to the definition of internal processes that allow for fast delivery of software to production systems through CI/CD pipelines while meeting security quality criteria with minimal effort
- Contribute to the implementation, enhancements, and support of initiatives around Software Compositional Analysis, software transparency, SDLC hardening, and vulnerability management
- Implement automation, at times including leading in the implementation of internal, in-house developed systems to implement Okta specific requirements
- Participate in weekly rotations to support our Engineering team when triaging and remediating findings related to the team's initiatives
- This role will report to the Director of Application Security and will work closely with other members of the DevSecOps team
Application process
- Some roles may require travel to one of our office locations for in-person onboarding
Our take
Okta started off as an identity company where organisations, large and small, could tap into the company to have a single sign-on interface to access all cloud applications now centralised. Okta has since expanded to provide identity management at the device as well as the server level.
The new approach towards network security is increasingly based on identification and authentication, and Okta is on track to become the go-to vendor in the space. They aim to do so by developing products that enable people to access applications and other tools more smoothly and securely than ever before.
Okta has taken strides towards expansion through significant employee growth and shuffling executive leadership. The company has also made lateral moves such as tackling governance concerns, opening up new paths for revenue.
Freddie
Company Specialist at Welcome to the Jungle
Insights
19% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2015
$75m
SERIES F
Jun 2014
$75m
SERIES E
Total funding: $229.3m
Company benefits
- Work from home opportunities
- Health + Wellness
- Financial Benefits
- Pay + Incentives
- Time Off
- Everyday Living
- Resources
Company HQ
The East Cut, San Francisco, CA
Leadership
Todd McKinnon
(CEO)VP of Development at Salesforce.com and has nearly a decade of experience in various engineering and leadership roles at PeopleSoft.
Frederic Kerrest
(Vice Chairman)Worked in Sales and Business Development at Salesforce.com, and previously co-founded high-tech consulting firm Meridian Global Solutions.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 149 more jobs at Okta