10 hours ago
Toronto, CanadaStaff+
Base Salary
$141k - $193k/yr
Responsibilities
- Conduct security reviews, design reviews, threat modeling, and penetration testing for new features and major changes.
- Perform manual secure code reviews across multiple programming languages and identify vulnerabilities.
- Provide remediation guidance and secure development advice to engineering teams and non-security staff.
- Lead product security incidents, risk assessments, and remediation efforts.
- Develop security tools and automation to improve vulnerability detection and assessment.
- Mentor junior engineers and communicate security risks, impact, and remediation strategies to developers and leadership.
- Represent Okta through security research, conference talks, white papers, blog posts, and external publications.
Requirements
- Expertise identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
- Strong experience with penetration testing and secure development practices.
- Deep technical experience assessing Large Language Models and securing AI-integrated software architectures.
- Proficiency in multiple programming languages, such as Java, Go, Python, and C/C++.
- Deep understanding of OIDC, SAML, and OAuth authentication and authorization protocols.
- Ability to automate security testing using LLMs and scripting languages such as Python and Bash.
- Experience leading security incidents and risk assessments.
- Preferred experience with iOS, Android, Windows, and macOS security testing.
- Familiarity with SAST, DAST, SCA, and fuzzing tools.
- Strong cryptographic knowledge, secure implementation skills, and experience analyzing network protocols and traffic security.
- Ability to develop proof-of-concept exploits to demonstrate vulnerabilities.
Benefits
- Equity, bonus, health, dental, and vision insurance are offered where applicable.
- Benefits include RRSP with a match, healthcare spending, telemedicine, and paid leave including PTO and parental leave.
- The role is hybrid, as indicated by the #LI-Hybrid designation.
- Okta provides an immersive, in-person onboarding experience.
- The company supports well-being, social impact, talent development, and community connection.
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.