Staff Identity Defense Engineer

Information Security is a top business imperative at Okta. In addition to driving security in our Corporate environment and Okta service, the Security team is deeply entrenched in the Okta business. As such, we contribute to product roadmaps, branding, research and other strategic aspects of our operations. We work across multiple functions, business partners and the research community. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape.

Okta’s Identity Defense Operations (IDO) organization is expanding our team dedicated to identifying attacks against our customers, developing best practices for security configurations to protect against attack, and working closely with Okta’s product teams to ensure additional security controls are implemented in order to better protect our customers. Working in close collaboration with other parts of the organization, this team will have the opportunity to improve the security posture of millions of users.

We are seeking builders who are excited about establishing a new team and helping shape Okta’s customer focused security operations.

Job Duties and Responsibilities

• Identify and respond to attacks targeting customers on the Okta platform through detailed analysis of Okta’s product telemetry.
• Assist customer Security teams during times of crisis by participating in their incident bridges and representing Okta Security.
• Develop dashboards and detection logic to identify known patterns of attack that may succeed should customer’s not implement best practice security controls.
• Develop and maintain security best practices that put Okta’s security features to use and enable customer facing teams to better communicate how these controls mitigate real world attacks.
• Identify gaps in Okta’s security features or secure by default settings that enable attackers to exploit our customers and collaborate with Okta’s product teams to design and implement additional controls.
• Work closely with Okta’s data scientists in order to test and train new machine learning models by validating real world data and providing known good and bad datasets.
• Collaborate with Okta’s Cyber Threat Research team to share details of threat actor activity and prioritize analytics based on the current cyber threat landscape as it applies to Okta’s customers.

What does it take?

You’re a team player with a thirst for knowledge. You may or may not currently be in a security role, but you are passionate about defending people’s online identities from malicious actors. You’re curious about systems and how they interact, knowing that to properly defend a system you must first understand how it works. You enjoy automating tasks and if you can’t find a tool for the job you create one. You’re calm under pressure and have a good internal compass for taking calculated risks.

Your experience probably includes:

• Learning the ins and outs of new SaaS products: you will be required to quickly become proficient in current and future Okta offerings
• Leading, or contributing to, technology focused teams large or small
• Working on identity and access management, security or data analytics projects.
• Participating or leading complex time-sensitive investigations involving customer account compromise, service abuse, inauthentic behavior or other types of threats an identity service provider would be responsible for helping customers address
• Identifying and solving problems related to complex technology stacks and following through to ensure long term solutions are effectively deployed
• Technologies and protocols to support identity federation and robust access control models (e.g., SAML 2.0, XACML, WS-Federation, WS-Trust, OAuth, OpenID).

#LI-Remote

#LI-CH1