Staff Security Engineer

Okta is seeking a hands-on Staff Security Engineer to join the TDI Security team in San Francisco, CA on-site. This role embeds within technical environments to harden infrastructure, cloud platforms, and business systems, building centralized security posture analytics, automating issue tracking and remediation, and advancing secure development and AI-enabled security at scale. The position offers a salary range of USD 134,000 to 184,800 per year, reflecting the senior level and impact of the role.

Responsibilities

• Elevate the Security Posture Management program to address issues surfaced by security tooling across the ecosystem.
• Utilize dashboards and visualization tools to demonstrate progress and current status of vulnerability and issue management.
• Lead Okta's Security Posture Management program, including data ingestion pipelines, logic to prioritize fixes, supporting teams remediating issues from tools such as ISPM, DSPM, and Qualys, and building automated systems at scale.
• Configure and operationalize tools like Snyk, Semgrep, and Qualys to broaden scanning coverage for all TDI assets.
• Collaborate with teams to troubleshoot and remediate findings and provide technical mentorship to developers and admins.
• Translate findings from tools such as ISPM/SSPM, Snyk, Semgrep, Qualys, Cyera, and other security platforms into metrics, reporting, and executive visibility that drive ownership, prioritization, and measurable risk reduction.
• Partner with Security and GRC to communicate risk posture and remediation status.
• Work with product and engineering teams to advise on secure coding, build pipelines, and deployment best practices.
• Support and enforce ProdSec SDL adoption across business units, standardizing design reviews and requirements gathering.
• Implement secrets rotation automation and best practices for secrets management across TDI systems.
• Lead shift left security efforts to embed security into the SDLC.
• Collaborate with SRE to manage update pipelines and enforce baseline standards compliance.
• Conduct light Security Architecture Reviews for lower environments to verify proper controls and data handling.
• Develop agentic automation to scale security posture scanning, reporting, issue remediation, and patch validation.
• Architect end-to-end automation flows and system design for an AI agent and subagents, including remediation and triage agents.
• Identify and close gaps across CSPM, CI/CD pipeline security, and endpoint hardening.
• Provide technical guidance for integrating security into business and productivity platforms such as Salesforce, ERP, Google Workspace, Slack, and Zoom.

Requirements

• 10+ years of experience in Security Engineering, DevSecOps, Infrastructure Security, or SaaS applications within a SaaS or enterprise environment.
• Hands-on expertise in scanning, patching, and remediating issues across cloud and SaaS ecosystems.
• Creative and strategic thinking focused on risk reduction through secure design and simplicity.
• Broad security knowledge that connects multiple security domains and capabilities.
• Ability to collaborate cross-functionally and balance security needs with business objectives.
• Experience deploying and managing Snyk, Semgrep, and Qualys tools.
• Strong knowledge of AWS security practices, SRE principles, and securing business tech stacks (Salesforce, ERP, Google, Slack, Zoom).
• Proven ability to coach, mentor, and collaborate with development teams to improve remediation velocity.
• Practical understanding of secure SDLC / PDLC, supply chain security, and secrets management.
• Experience building security tools and automated tooling.
• Effective communication skills for strategic discussions with leadership and individual contributors; proficient with visualization/BI tools for dashboards and reporting.
• Experience driving remediation across issues raised by posture management solutions.
• Excellent troubleshooting and communication skills with a proactive, solution-oriented mindset.

Technologies

• Snyk
• Semgrep
• Qualys
• ISPM
• SSPM
• Cyera
• AWS
• Salesforce
• ERP
• Google Workspace
• Slack
• Zoom

Benefits

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community