Staff Product Security Engineer, Reviews
Okta · Sec - Product Security-771
- Location
- Toronto, Ontario, Canada
- Metro
- Toronto
- Workplace
- Unspecified
- Level
- Staff+
- Type
- Unspecified
- Pay
- $141K–$193K/yr (estimated from posting text)
- Posted
- 1 month ago
- Source
- Greenhouse
Read the full posting & apply ↗
What the posting covers
About the company
Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to…
The Staff Product Security Engineer Opportunity
As a Staff Product Security Engineer, you will play a critical role in safeguarding Okta’s products by conducting comprehensive security reviews, guiding engineering teams in secure development practices, and handling externally reported vulnerabilities. You…
What You Will Do
Conduct security reviews, including design reviews, threat modeling, and penetration testing of new features and major changes. Perform manual secure code reviews across multiple programming languages. Identify and mitigate security vulnerabilities, providing…
What You Bring
Expertise in identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review. Strong experience in penetration testing and secure development practices. Deep technical background in assessing Large Language Models (LLMs) and securing…
Desired Skills and Abilities
Experience in mobile (iOS/Android) and desktop (Windows/macOS) security testing. Familiarity with SAST, DAST, SCA, and fuzzing tools. Strong cryptographic knowledge and secure implementation practices. Experience analyzing network protocols and traffic…
The Okta Experience
Supporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with…
Excerpts only. The employer’s page has the complete posting.