O

Okta

Secures digital identities for people and software

Staff Product Security Engineer - Reviews

Security Engineering & ArchitectureUpdated on Nov 11
Full-timeToronto, ON, CanadaIn-person

About the Job

Requirements

  • Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
  • Strong experience in penetration testing and secure development practices.
  • A deep technical background in assessing Large Language Models and securing AI-integrated software architectures.
  • Proficiency in multiple programming languages, such as Java, Go, Python, and C/C++.
  • A deep understanding of authentication and authorization protocols, including OIDC, SAML, and OAuth.
  • The ability to automate security testing using Large Language Models and scripting languages such as Python and Bash.
  • Experience leading security incidents and risk assessments.

Responsibilities

  • Conduct security reviews, including design reviews, threat modeling, and penetration testing of new features and major changes.
  • Perform manual secure code reviews across multiple programming languages.
  • Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
  • Lead product security incidents, assess risks, and drive remediation efforts.
  • Develop security tools and automation to improve vulnerability detection and assessment.
  • Mentor junior engineers and provide guidance to non-security staff on secure development practices.
  • Represent Okta externally through security research, conference talks, and publications.
  • Communicate risks, impact, and remediation strategies to developers, leadership, and external audiences through documentation, presentations, and external publications.

Desired Qualifications

  • Experience in mobile security testing for iOS and Android and desktop security testing for Windows and macOS.
  • Familiarity with static application security testing, dynamic application security testing, software composition analysis, and fuzzing tools.
  • Strong cryptographic knowledge and secure implementation practices.
  • Experience analyzing network protocols and traffic security.
  • The ability to develop proof-of-concept exploits to demonstrate vulnerabilities.

About the Company

Okta

Secures digital identities for people and software

Okta builds cloud identity software that controls how employees, customers, and automated systems access applications and company resources. Its single sign-on product lets people use one login across their work tools, while passwordless sign-in and additional identity checks protect accounts from stolen credentials. Administrators use its directory, access policies, and lifecycle tools to grant permissions when someone joins an organization and remove them when they leave. Organizations pay subscriptions based on the products they use and the identities they manage, with support included. Okta was founded in 2009 and is headquartered in San Francisco, California, United States.

Company size
5,001-10,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2009

Recently Posted Jobs

Explore more opportunities at Okta

See more jobs