Okta is seeking a Staff Product Security Engineer for Reviews in Washington, DC (hybrid), with a salary range of USD 180,000 to 247,500 per year.

Perform security reviews for new features and major changes, including design assessments, threat modeling, and penetration testing.
Carry out manual secure code reviews across multiple programming languages.
Identify and remediate security vulnerabilities, delivering clear guidance to engineering teams.
Lead product security incidents, evaluate risks, and drive remediation efforts.
Develop security tooling and automation to enhance vulnerability detection and assessment.
Mentor junior engineers and advise non security staff on secure development practices.
Represent Okta externally through security research, conference talks, and publications.

Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities via manual code review.
Strong background in penetration testing and secure development practices.
Deep technical experience evaluating Large Language Models and securing AI integrated software architectures.
Proficiency in multiple programming languages such as Java, Go, Python, and C/C++.
Solid understanding of authentication and authorization protocols including OIDC, SAML, and OAuth.
Effective communication skills to convey risks and remediation to developers and leadership.
Ability to automate security testing using LLMs and scripting languages like Python and Bash.
Experience leading security incidents and conducting risk assessments.

Staff Product Security Engineer, Reviews

Job Description