GET TO KNOW OKTA

Okta is The World’s Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth.
At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences.
Join our team! We’re building a world where Identity belongs to you.
Staff Product Security Engineer, Secure Development Enablement & Operations
Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.
At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every box - we’re looking for lifelong learners and people who can improve us with their unique experiences.
Join our team! We’re building a world where Identity belongs to you.
The Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business
As a Staff Product Security Engineer focusing on Secure Development Enablement and Operations at Okta, your role is pivotal in fostering a ‘security-first’ mindset and technology ecosystem throughout the organization. Your passion for security and commitment to developer centric solutions will inspire you to lead developer-led security impact through the strategic development of diverse training materials tailored to various learning styles, roles, and organization security needs, development of strategic partnership programs with partner organizations, the development and maintenance of systems and platforms.
We’re looking for a candidate who combines a deep knowledge of security practices with an acute ability to convey this knowledge effectively, to not only bring this knowledge to Engineering but to model and guide their journey to implementing the best possible Secure Development Lifecycle.. Your efforts will be vital in integrating a robust security mindset into the core of our company culture at Okta. Your role is not just about teaching security; it’s about transforming how we think about and approach security daily.

What You’ll Do

• Collaborate closely with engineering teams to understand their current security needs and identify new opportunities for training, collaboration with Subject Matter Experts within the Product Security Team, and system improvements to better meet SDL requirements
• Play a pivotal role in cultivating a strong security culture within Okta, emphasizing the importance of security in every aspect of our work, including initiatives such as our Security Champions program
• Leverage existing, and implement new systems that contribute to the continuous assessment of security practices and adherence to SDL security requirements
• Collaborate closely with teams across Product Security, ensuring a cohesive and comprehensive approach to educating and interfacing with engineering departments
• Lead or contribute to projects aimed at bringing security empowerment to developers early in their software development lifecycle, including through development of tools and systems or through facilitating and advocating for the use of off the shelf security tools
• Stay informed of the latest security threats, trends, and technologies to keep training materials up-to-date with current best practices and emerging threats

What You Bring

• Excellent communication and presentation skills, with the ability to explain complex security concepts to technical and non-technical audiences
• In-depth knowledge of modern web application vulnerabilities and remediations (e.g., OWASP Top 10, CWE Top 25)
• Ability to quickly learn and teach various security topics such as threat modeling, shifting left, cloud security, etc.
• Experience working with cross-functional teams, possessing exceptional stakeholder management skills, and the ability to work independently
• Hands on experience in security tool development or automation and strong systemic thinking

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent experience.
• 10+ years of experience in Product Security or related positions

• Collaborate closely with engineering teams to understand their current security needs and identify new opportunities for training, collaboration with Subject Matter Experts within the Product Security Team, and system improvements to better meet SDL requirements
• Play a pivotal role in cultivating a strong security culture within Okta, emphasizing the importance of security in every aspect of our work, including initiatives such as our Security Champions program
• Leverage existing, and implement new systems that contribute to the continuous assessment of security practices and adherence to SDL security requirements
• Collaborate closely with teams across Product Security, ensuring a cohesive and comprehensive approach to educating and interfacing with engineering departments
• Lead or contribute to projects aimed at bringing security empowerment to developers early in their software development lifecycle, including through development of tools and systems or through facilitating and advocating for the use of off the shelf security tools
• Stay informed of the latest security threats, trends, and technologies to keep training materials up-to-date with current best practices and emerging threat