Auth0 Staff Security Engineer, Security Detection & Response at Okta

Remote (EMEA)

The Customer Identity Cloud (CIC, formerly Auth0) Detection and Response team at Okta is a diverse group of highly motivated and skilled security engineers and analysts. We are responsible for identifying and mitigating threats that present a risk to the business. 

If you enjoy creative problem-solving, working with the latest security technologies and collaborating with teams across the business to build and deploy complex security projects, then you have found the right career at the right company.  

We are looking for a technical and hands-on Detection & Response Engineer who is passionate about protecting CIC customers, employees, and brand. The successful candidate will have a mix of deep technical knowledge, excellent coding and communication skills, and a solid background in information security.

In this role you will:

• Participate in an on-call rotation.
• Teach and mentor junior team members.
• Lead security investigations and incidents as Incident Commander.
• Lead security incident post mortems and retrospectives.
• Implement detections using our state-of-the-art detections-as-code pipeline.
• Maintain and improve the detection and alerting pipeline.
• Build SOAR automations.
• Peer review code contributions and project proposals.
• Analyze metrics and trends to support decisions.
• Work cross-functionally with stakeholders across the organization to architect and deploy solutions that adds to our visibility.

Our ideal candidate will have many of the following:

• Experience leading and responding to security incidents.
• Experience creating threat detections.
• Experience securing cloud infrastructure such as AWS and Azure.
• Strong proficiency in Python and Terraform.
• Strong written and verbal communication skills.
• Deep understanding of common attack vectors and how to detect and mitigate them.
• Experience explaining very technical topics at a high level.
• Experience working in an on-call rotation.
• Experience conducting forensic investigations of Linux hosts.
• Experience working on large, complex projects with product teams.

Additional skills that would be nice to have:

• Experience monitoring production Kubernetes containers for threats.
• Experience with Panther and Snowflake.
• Background in driving change by motivating others.

#LI-JB2