7 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Research and lead AI-assisted defenses for customer tenant hardening, detection, triage, and incident response.
- Research and build protections against adversarial ML, prompt injection, agentic protocol abuse, model poisoning, and data poisoning affecting identity systems.
- Translate emerging AI threats into a 12–24 month protection strategy and architect, recommend, and build supporting tooling.
- Review and harden Auth0’s AI security offering and identify mitigations for emerging security gaps.
- Partner with security, engineering, product, and enterprise security teams to ship protections and influence platform-wide standards.
- Own security architecture designs and decisions across Auth0 and Okta Customer Identity infrastructure.
- Establish the Advanced Threat Protection engineering and threat research roadmap.
- Coach and mentor Senior P3 engineers and other team members.
Requirements
- 8+ years of experience in security engineering with a record of setting technical vision, leading cross-organizational initiatives, and making cloud or product security architecture decisions.
- Hands-on experience attacking or defending AI/ML systems, including adversarial ML, LLM or prompt-injection attacks, agentic-system abuse, or model abuse.
- Hands-on development experience sufficient to prototype tooling, build AI-powered defenses, and operationalize research; Go is preferred.
- Working knowledge and hands-on experience with AWS or Azure security and Kubernetes.
- Strong knowledge of OWASP, including the OWASP Top 10 for LLM Applications, secure coding, and secure software development lifecycle practices.
- Experience mentoring senior engineers, defining multi-quarter strategy, building architectural consensus, and influencing cross-organizational security initiatives.
- Strong written and verbal communication skills and experience working with globally distributed and remote teams.
- Preferred qualifications include published AI/ML or identity-security threat research, CVEs, conference talks, production AI/ML security tooling, adversarial ML, AI safety research, the AI agent or MCP ecosystem, identity and access management, full-stack engineering, site reliability engineering, vulnerability and threat management, or governance, risk, and compliance.
Benefits
- Hybrid work arrangement with a globally distributed team.
- In-person onboarding designed to accelerate impact and build connections.
- Well-being support, social impact programs, talent development, and community-building opportunities.
- Global community spanning more than 20 offices worldwide.
Tech Stack
Categories
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.