Staff Application Security Engineer

Within the Product Security team, our Security Reviews team delivers robust security assurance for Okta's products. We conduct comprehensive reviews encompassing design, architecture, code, and penetration tests for new and existing features. Collaborating seamlessly with other Product Security teams, we establish a unified methodology, fostering consistency when engaging with Okta's engineering teams.

We seek a dynamic manager to lead our EMEA team, spearheading day-to-day operations, orchestrating security reviews, and acting as a technical lead to support team members in overcoming challenges. Your role extends to cultivating collaboration with local stakeholders and elevating our products' security posture through strategic engagement and proactive measures.

What You Will Do

• Lead the scheduling and  management of programs and projects, concentrating on refining processes, metrics, and frameworks related to product security
• Take on the role of a technical lead within the team, providing expert guidance on the planning, preparing, and executing security reviews. Your responsibilities include offering strategic technical advice, ensuring thorough preparation, and overseeing the seamless execution of security assessments.
• Collaborate closely with Engineering, Product, and Design teams to comprehend their security requirements and pinpoint opportunities for program enhancements.
• Oversee key performance indicator (KPI) metrics, regularly tracking and reporting program performance to senior management
• Effectively communicate vulnerability mitigation strategies
• Mentor product security engineers in their career progression
• Deliver security presentations, representing Okta with authority in private and public forums.

What You Bring

• Extensive professional background in product security, demonstrating leadership or managerial roles and a commitment to cultivating high-performing, inclusive, and collaborative teams
• Proven track record in managing geographically distributed security teams
• Advanced expertise in modern web application components, architecture, and design principles
• Proficient in identifying prevalent web application vulnerabilities through secure code reviews and conducting manual Web Application Penetration Tests
• Exceptional ability to articulate vulnerability risks and present remediation options clearly to stakeholders

#LI-JB2

#LI-Remote