1 month ago
Toronto, CanadaStaff+
Responsibilities
- Conduct security reviews, design reviews, threat modeling, and penetration testing for new features and major changes.
- Perform manual secure code reviews across multiple programming languages and identify and mitigate vulnerabilities.
- Lead product security incidents, assess risks, and drive remediation efforts.
- Develop security tools and automation to improve vulnerability detection and assessment.
- Mentor junior engineers and guide non-security staff on secure development practices.
- Communicate risks, impacts, and remediation strategies to developers, leadership, and external audiences.
- Represent Okta through security research, conference talks, publications, white papers, blog posts, and presentations.
Requirements
- Expertise identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
- Strong experience with penetration testing and secure development practices.
- Deep technical background assessing Large Language Models and securing AI-integrated software architectures.
- Proficiency in multiple programming languages, including examples such as Java, Go, Python, and C/C++.
- Deep understanding of OIDC, SAML, and OAuth authentication and authorization protocols.
- Ability to automate security testing using LLMs and scripting such as Python and Bash.
- Experience leading security incidents and risk assessments.
- Preferred experience with mobile iOS and Android and desktop Windows and macOS security testing.
- Familiarity with SAST, DAST, SCA, and fuzzing tools.
- Strong cryptographic knowledge and secure implementation practices.
- Experience analyzing network protocols and traffic security.
- Ability to develop proof-of-concept exploits.
Benefits
- Hybrid work arrangement.
- Health, dental, and vision insurance.
- RRSP with a match, healthcare spending, telemedicine, and paid leave including PTO and parental leave.
- Immersive in-person onboarding experience.
- Opportunities for talent development, social impact, and community connection.
- Equity and bonus may be available.
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.