Staff Product Security Engineer, PSIRT

Okta
Barcelona
Workplace: RemoteFull timeEUR 74,000 - 101,000 annuallyFunction: CybersecurityExperience: 6+ yearsSkills: ["Communication","Collaboration","Technical writing","Process documentation","Executive presentation"]

Own and mature Okta’s Product Security Incident Response Program across products and business units. Run the day-to-day bug bounty program—engaging researchers, triaging and validating vulnerabilities, assessing severity, coordinating remediation, and recommending rewards. Lead security disclosure end-to-end, report program health, and partner cross-functionally with Engineering, IT, Product, Legal, and Security while mentoring engineers and driving proactive threat detection and vulnerability management.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Okta
Okta
1 month ago

Staff Product Security Engineer, PSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Own and mature Okta’s Product Security Incident Response Program across products and business units. Run the day-to-day bug bounty program—engaging researchers, triaging and validating vulnerabilities, assessing severity, coordinating remediation, and recommending rewards. Lead security disclosure end-to-end, report program health, and partner cross-functionally with Engineering, IT, Product, Legal, and Security while mentoring engineers and driving proactive threat detection and vulnerability management.
Location: Barcelona
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Define, improve, formalize, and implement Okta’s Product Security Incident Response Program for all products and business units.
  • •Operate the bug bounty program, including researcher engagement, vulnerability triage/validation, severity assessment, remediation coordination, reward recommendations, and process improvements.
  • •Oversee the full incident lifecycle from discovery to resolution, including triage, impact assessment, coordination with engineering, fix validation, and stakeholder communication.
  • •Lead the security disclosure program from triage through disclosure and reporting on program health and status of activities.
  • •Collaborate cross-functionally across Engineering, IT, Product, Legal, and Security; mentor junior engineers and partner with leadership on proactive threat detection and vulnerability management.

Pay and Benefits

Salary: EUR 74,000 - 101,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceEquityPaid LeaveParental Leave

Key Requirements

  • •6+ years of experience in information security with a focus on product security, application security, vulnerability management, and security operations.
  • •Experience conducting comprehensive security code reviews to identify vulnerabilities and code flaws.
  • •Hands-on application security vulnerability experience and strong understanding of product security concepts.
  • •Experience in risk management and handling incident response for product-related issues.
  • •Knowledge of incident and log management tools, with strong technical communication skills (writing, documentation, and executive presentations).
Experience:6+ years
Skills:CommunicationCollaborationTechnical writingProcess documentationExecutive presentation
Languages:English

Company Brief

Okta
Provides identity and access management cloud solutions that help organizations secure and manage user authentication, single sign-on, multi-factor authentication, and lifecycle management across applications and devices.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2009
WebsiteLinkedIn