2 days ago
Dublin, IrelandStaff+
Responsibilities
- Identify, plan, and exploit complex security gaps across application, cloud, identity, and network layers.
- Conduct targeted security assessments and penetration tests and deliver actionable findings, exploit recreation details, and architectural remediation guidance.
- Assess AI/LLM-integrated features and agent-based workflows, develop novel attack techniques, and evaluate defensive controls.
- Design, build, and maintain offensive security automation frameworks, including custom fuzzers, scanners, and pipeline-integrated validation tools.
- Serve as a security subject matter expert for internal teams and represent Okta in internal and external forums.
- Triage internal vulnerability tickets and external bug bounty submissions periodically.
- Support security research publication, mentoring, and knowledge sharing.
Requirements
- 5+ years of experience in penetration testing web applications, related infrastructure, and networks is preferred.
- Extensive experience testing identity and access management platforms, multi-tenant SaaS architectures, or authentication and authorization systems.
- Experience with application security, backend and middleware testing, network penetration testing, and common vulnerabilities.
- Experience assessing AI/LLM security risks, developing offensive techniques against AI-integrated systems, or strong interest in doing so.
- A track record of building and shipping maintainable offensive security tooling beyond ad-hoc scripts.
- Experience operating within and securing cloud environments, with GCP experience required; AWS or Azure experience is welcomed.
- Experience with infrastructure tooling including Kubernetes, Terraform, Chef, and ArgoCD.
- Familiarity with Linux and macOS security features, command-line tools, and common attack surfaces.
- Experience testing authentication protocols including SAML, OAuth 2.0, and OIDC.
- Familiarity with threat modeling concepts and frameworks, infrastructure as code, and modern cryptographic principles.
- Ability to develop strategic, comprehensive attack scenarios and communicate security findings and remediation strategies clearly.
- Experience or interest in mentoring and sharing knowledge with team members.
Benefits
- Annual base salary range of €90.000—€123.200 EUR for candidates located in Ireland.
- Equity where applicable, bonus, comprehensive healthcare coverage, financial benefits, paid time off, and parental leave according to applicable plans and policies.
- Immersive, in-person onboarding experience designed to accelerate impact and connect new hires with the team.
- Support for well-being, social impact, talent development, and community connection.
Tech Stack
Categories
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.