Staff Detection and Response Engineer

at  Okta

GET TO KNOW OKTA

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.
At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences.
Join our team! We’re building a world where Identity belongs to you.
Information Security is a top business imperative here at Okta. In addition to driving security in our Corporate environment and Okta service, the Security team is deeply entrenched in the Okta business. As such, we contribute to product roadmaps, branding, research and other strategic aspects of our operations. We work across multiple functions, business partners and the research community. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape.
The Defensive Cyber Operations (DCO) team is seeking an experienced detection and response leader to contribute to Okta’s detection and response programs responsible for defending the Okta platform, infrastructure and corporate environment.

You will operate as part of the DCO APJ team, building and maintaining the detection capability to enable Okta’s intel-driven approach to defensive cyber operations. Core responsibilities include:

• Analyse Okta’s systems in order to identify and close gaps in detection and response coverage
• Orchestrate and automate the enrichment, triage and response steps required to respond to security related alerts
• Take part in the DCO watch roster triaging alerts escalated via automated processes and third-party notifications
• Provide technical expertise and contribute to the investigation, remediation and reporting of cyber security incidents
• Identify the need for tools and data that will enable the continuous improvement of detection and response capabilities