Staff Product Security Engineer (PSIRT)

Join Okta, the leading Identity-as-a-Service solutions provider, as a Staff Product Security Engineer. In this role, you will be responsible for defining and implementing Okta's Product Security Incident Response Program, managing the bug bounty program, and overseeing the entire lifecycle of vulnerability management. You will collaborate with internal teams, mentor junior engineers, and drive proactive threat detection and vulnerability management. This position offers work-from-home opportunities, health and wellness benefits, financial benefits, and time off.

• Defining, improving, formalizing, and implementing Okta’s Product Security Incident Response Program for all products and business units.
• Overseeing the entire lifecycle from discovery to resolution of vulnerabilities, including triaging, impact assessment, coordination with engineering teams, and validating fixes.
• Leading the overall security disclosure program, from triaging to disclosure, and reporting on the health of the program and the overall status of its activities.
• Working experience in Product Security concepts
• Knowledge of incident and log management tools
• Working experience in risk management
• Excellent communication and collaboration skills, particularly in technical writing, process documentation, and executive presentations
• 6+ years of experience in Information Security with a focus on Product Security, Application Security, Vulnerability Management, and Security Operations
• Working experience in handling incident response for product-related issues
• Working experience in conducting comprehensive security code reviews to identify vulnerabilities and code flaws
• Working experience in Application Security vulnerabilities