Staff Product Security Engineer, Secure Development Enablement

The Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business

As a Staff Product Security Engineer focusing on Secure Development Enablement at Okta, your role is pivotal in fostering a 'security-first' mindset throughout the organization. Your passion for security and commitment to education will inspire you to develop innovative and diverse training materials tailored to various learning styles. These resources are essential in enhancing the security expertise of our engineering teams.

We're looking for a candidate who combines a deep knowledge of security practices with an acute ability to convey this knowledge effectively. Your efforts will be vital in integrating a robust security mindset into the core of our company culture at Okta. Your role is not just about teaching security; it's about transforming how we think about and approach security daily.

What You'll Do

• Collaborate closely with engineering teams to understand their current security training needs and identify new educational opportunities
• Create engaging and varied educational content that caters to different learning preferences, ensuring all engineering team members understand and apply security principles
• Play a pivotal role in cultivating a strong security culture within Okta, emphasizing the importance of security in every aspect of our work, including initiatives such as our Security Champions program
• Collaborate closely with teams across Product Security, ensuring a cohesive and comprehensive approach to educating and interfacing with engineering departments
• Stay informed of the latest security threats, trends, and technologies to keep training materials up-to-date with current best practices and emerging threats

What You Bring

• Minimum of 8 years of experience in Application or Product Security teams or similar roles
• Excellent communication and presentation skills, with the ability to explain complex security concepts to technical and non-technical audiences
• In-depth knowledge of modern web application vulnerabilities and remediations (e.g., OWASP Top 10, CWE Top 25).
• Ability to quickly learn and teach various security topics such as threat modeling, shifting left, cloud security, etc.
• Experience working with cross-functional teams, possessing exceptional stakeholder management skills, and the ability to work independently

#LI-REMOTE
#LI-SH1