Staff Vulnerability Management Analyst, Okta
$131-197k
+ Bonus
Management platform securing resources from cloud to ground
Job no longer available
Management platform securing resources from cloud to ground
1001+ employees
Job no longer available
$131-197k
+ Bonus
1001+ employees
Company mission
To improve the connections between people and tools to make companies more productive and secure.
Role
Who you are
- 5+ years of multifaceted cyber security experience in a technology-centric company
- Experience in building and innovating a vulnerability management program
- Experience defining projects, including goals, resourcing, activities, targets, and milestones, and producing good effort estimations
- Experience in having had hands-on responsibility for analyzing common vulnerabilities
- Experience with commercial or open-source vulnerability scanners regarding at least one of these spaces: Infrastructure/ IP based Assets, Web Application, SAST, DAST, Containers
- Functional knowledge of vulnerabilities, exploitation and remediation. You should be able to explain vulnerabilities and exploits as well as propose remediations for the most common vulnerabilities
- Experience in building systems and solutions within a highly regulated environment
- Familiarity with industry standards and frameworks such as CVE, CVSS, and OWASP
- Solid understanding of security best practices in cloud environments
- Proficiency in scripting and automation with Python
- Familiarity with other scripting and automation tools is a plus
- Experience working with AWS Lambda or similar serverless computing environments for automating vulnerability management tasks
- Proficiency in working with AWS services such as S3, DynamoDB, API Gateway, and others
- Intermediate knowledge of TCP/IP
- Experience developing threat models
- Knowledge of at least one of AWS, GCP, Azure, etc
- You have a deep focus on execution, follow-through, accountability, and results
- You have a growth mindset; You thrive on challenge, you see learnings and opportunities, not failures
- You enjoy working with cross-functional teams and have exceptional stakeholder management skills
- You surround yourself with high energy, thriving teams to achieve quality outcomes
- Bachelor's degree in Computer Science, Computer Engineering, or equivalent experience
What the job involves
- The Okta Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solutions through identifying and resolving risks to the employees, product, and most importantly, our customers
- With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business
- The Vulnerability Management Analyst is a key member of the Okta Security team and an essential collaborator with our broader Engineering organization
- Reporting to the Director of Vulnerability Management, the Vulnerability Management Analyst will play a key part in executing the Vulnerability Management Program’s strategy
- The Vulnerability Management Program is a crucial pillar of the security organizations’ imperative to reduce the threats to Okta’s infrastructure and applications
- You’ll be an integral part of building and sustaining strong and effective relationships across Okta with our Engineering, Product and Business Technology counterparts
- Deploy, manage, maintain, configure, extend and automate vulnerability scanning infrastructure and services
- Build scripts and software modules to verify the presence of vulnerabilities
- Develop and implement alerting regarding scan environment health checks as well as vulnerability notification
- Keep up with newly published vulnerabilities/ CVEs and zero-days
- Investigate vulnerability findings present within the environment, and coordinate remediation efforts in collaboration with other IT teams and subject matter experts
- Monitor and maintain awareness of critical vulnerabilities, driving patch management or mitigating processes to reduce impact
- Document, review and deliver requirements and recommendations related to vulnerability remediation which follow common industry standards and security frameworks
- Assist business stakeholders in assessing risk and prioritizing vulnerability remediation. Assist in providing risk context to vulnerability reports given the infrastructure purpose
- Understand the technical details of the published vulnerabilities as well as their real risk. Effectively communicate the perceived and real vulnerability impact
- Assist in analyzing data from internet scanning tools in order to validate its accuracy
- Validate vulnerability management changes for accuracy and completion to drive timely remediation of critical vulnerabilities
- Confirm remediation via automated and manual retesting
- Provide support to developers working on vulnerability remediation
- Contribute to the definition of internal processes that allow for fast remediation of vulnerabilities to production systems
- Assess new and existing scan technologies to determine potential value and risk to the enterprise and ensure risk beyond defined thresholds is appropriately treated
- Monitor and respond to security inquiries, requests, and incidents as part of supporting the business through sound and timely cybersecurity response
- Support audit, governance, risk and compliance teams in scanning and reporting on various regulatory compliance and industry best practices including PCI, ISO 27001/27017/27018 , NIST SP 800-53, SOC 2 and FedRAMP
- Participate in other special projects or strategic initiatives at the direction of the Security team
Our take
Okta started off as an identity company where organisations, large and small, could tap into the company to have a single sign-on interface to access all cloud applications now centralised. Okta has since expanded to provide identity management at the device as well as the server level.
The new approach towards network security is increasingly based on identification and authentication, and Okta is on track to become the go-to vendor in the space. They aim to do so by developing products that enable people to access applications and other tools more smoothly and securely than ever before.
Okta has taken strides towards expansion through significant employee growth and shuffling executive leadership. The company has also made lateral moves such as tackling governance concerns, opening up new paths for revenue.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
19% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Sep 2015
$75m
SERIES F
Jun 2014
$75m
SERIES E
Total funding: $229.3m
Company benefits
- Work from home opportunities
- Health + Wellness
- Financial Benefits
- Pay + Incentives
- Time Off
- Everyday Living
- Resources
Company values
- Love our customers
- Never stop innovating
- Act with integrity
- Be transparent
- Empower our people
Company HQ
The East Cut, San Francisco, CA
Articles
Leadership
Todd McKinnon
(CEO)VP of Development at Salesforce.com and has nearly a decade of experience in various engineering and leadership roles at PeopleSoft.
Frederic Kerrest
(Vice Chairman)Worked in Sales and Business Development at Salesforce.com, and previously co-founded high-tech consulting firm Meridian Global Solutions.
People progressing
Joined as Senior Manager, Recruiting EMEA and promoted to Director, Recruiting EMEA after 3 years. Promoted again to Senior Director, Recruiting EMEA after another 3 years.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Diversity, Equity & Inclusion at Okta
- Workforce: We believe in recruiting diverse talent to create balanced teams
- Workplace: We support and empower employees to be authentic and grow through open conversations and education
- Marketplace: We go to market and sell to diverse audiences
Share this job
View 48 more jobs at Okta