Staff Product Security Engineer, Reviews

Okta
Toronto
Workplace: HybridFull timeUSD 141,000 - 193,000 annuallyFunction: CybersecuritySkills: ["Communication","Mentoring","Risk assessment","Attacker mindset","Secure development guidance"]

Lead product security reviews for Okta’s platforms by running design reviews, threat modeling, and manual penetration testing across major features and releases. Perform secure code reviews in multiple languages, investigate externally reported vulnerabilities, and guide teams with clear risk and remediation recommendations. Build security automation tools to proactively detect issues, lead incident response, and communicate findings through documentation, presentations, and public research—especially around AI-integrated architectures and LLM threats.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Okta
Okta
15 hours ago

Staff Product Security Engineer, Reviews

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Lead product security reviews for Okta’s platforms by running design reviews, threat modeling, and manual penetration testing across major features and releases. Perform secure code reviews in multiple languages, investigate externally reported vulnerabilities, and guide teams with clear risk and remediation recommendations. Build security automation tools to proactively detect issues, lead incident response, and communicate findings through documentation, presentations, and public research—especially around AI-integrated architectures and LLM threats.
Location: Toronto
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Conduct security reviews including design reviews, threat modeling, and penetration testing for new features and major changes.
  • •Perform manual secure code reviews across multiple programming languages.
  • •Identify and mitigate vulnerabilities by providing clear guidance to engineering teams.
  • •Lead product security incidents, assess risks, and drive remediation.
  • •Develop security tools and automation, and mentor engineers on secure development practices.

Pay and Benefits

Salary: USD 141,000 - 193,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionRrsp MatchTelemedicinePaid LeaveParental Leave

Key Requirements

  • •Expertise identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review.
  • •Strong experience in penetration testing and secure development practices.
  • •Deep technical background securing AI-integrated software architectures and Large Language Models (LLMs) against emerging threats.
  • •Proficiency in multiple programming languages (e.g., Java, Go, Python, C/C++).
  • •Deep understanding of authentication & authorization protocols (OIDC, SAML, OAuth) and ability to automate security testing (e.g., Python, Bash).
Skills:CommunicationMentoringRisk assessmentAttacker mindsetSecure development guidance
Languages:English
Tech Stack:OWASP Top 10CWE Top 25Penetration testingJavaGoPythonC/C++SAMLOAuthOIDCBashSASTDASTSCAFuzzingIOSAndroidWindowsMacOSCryptography

Company Brief

Okta
Provides identity and access management cloud solutions that help organizations secure and manage user authentication, single sign-on, multi-factor authentication, and lifecycle management across applications and devices.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2009
WebsiteLinkedIn