2 months ago
Barcelona, SpainStaff+
Responsibilities
- Define, improve, formalize, and implement Okta’s Product Security Incident Response Program across all products and business units.
- Manage daily bug bounty operations, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and process improvements.
- Oversee vulnerabilities from discovery through resolution, including impact assessment, engineering coordination, fix validation, and stakeholder communication.
- Lead the security disclosure program from triage through disclosure and report on program health and activity status.
- Collaborate with Engineering, IT, Product, Legal, and Security teams on workflows, governance, and vulnerability and risk communication.
- Mentor junior engineers on incident response procedures, technical investigations, and vulnerability remediation.
- Partner with leadership to drive proactive threat detection and vulnerability management.
Requirements
- At least 6 years of information security experience focused on Product Security, Application Security, Vulnerability Management, and Security Operations.
- Experience conducting comprehensive security code reviews to identify vulnerabilities and code flaws.
- Experience with application security vulnerabilities, product security concepts, risk management, and product-related incident response.
- Knowledge of incident and log management tools.
- Strong communication and collaboration skills, including technical writing, process documentation, and executive presentations.
Benefits
- Equity where applicable, bonus, comprehensive healthcare coverage, paid time off, and parental leave are offered according to applicable plans and policies.
- The role is available to candidates in Ireland and Spain; the stated salary range applies to candidates located in Spain.
- An immersive, in-person onboarding experience is provided.
Categories
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.