Staff Security Engineer

Staff Enterprise Security Engineer, SaaS and API Security

Join Okta’s Enterprise Security team as a senior engineer. You’ll work closely with the Security, Business Technology and our Product to safeguard Okta’s endpoints, specifically our SaaS applications, API integrations, and Browser Plugins. You’ll use your skills in IT, security, and development to build, automate, secure, test, and operationalize solutions that achieve security and business objectives.

Preferred experience with enterprise security tools for API Security Posture Management, SSPM (SaaS Secure Posture Management), Identity Security Posture Management (ISPM), Unified Vulnerability Management (custom-built), Cyber Asset Attack Surface Management (CAASM), Cloud Asset Monitoring (cloudquery), DLP (Data Loss Prevention). The ideal candidate should have a proven track record automating solutions utilizing a cloud first approach and be comfortable communicating with support staff, technical leadership, and management.

The most important quality is an innate desire to make tools and people work together solving complex problems with expertise, creativity, and a security first mindset.

What you’ll be doing

• Collaborate with security architecture to design and evaluate solutions and processes for end-to-end SaaS security architecture.
• Own the implementation of relevant SaaS security solutions.
• Build and automate security checks for APIs (machine-to-machine) and browser plugins.
• Automate continuous posture checks into permission scope for third party applications business-critical systems.
• Own relationships with internal teams as a security SME for asset and data discovery, risk assessment, security control contextualisation and vulnerability triage and mitigation.
• Work with internal stakeholders and vendors to evaluate new SaaS solutions before they are deployed or critical changes are made to existing SaaS solutions.
• Build and update custom automation to support the team’s workflows.
• Stay updated on emerging security solutions and tools.

What you’ll bring to the role

• 5+ years experience securing corporate SaaS applications (Salesforce, Google Workspace, Slack).
• 5+ years experience in securing APIs and browser extensions.
• 3+ years experience working with enterprise security solutions.
• 3+ years experience working in AWS or other cloud environments.
• 3+ years experience with a modern scripting language (Python preferred).
• Experience providing security guidance and mitigations to teams.
• Experience evaluating third party software solutions.
• Strong written and verbal communication skills.
• A streamlined approach to meeting objectives in line with Okta's Secure Identity Commitment.

And extra credit if you have experience in any of the following!

• Experience leading projects
• Experience working with identity management technologies (MFA, SAML, WebAuthn)
• Experience working with Okta
  
  

What you can look forward to as an Full-Time Okta employee!

• Amazing Benefits
• Making Social Impact

#LI-JP2