Staff Security Engineer, TDI

About the role

The Technology, Data, and Intelligence (TDI) Team at Okta is seeking a highly skilled and hands-on Staff Security Engineer with a DevSecOps & Issue Management focus to join the TDI Security team. This is a tactical and strategic role aimed at strengthening Okta’s security posture across infrastructure, cloud, and business systems.

Responsibilities

• Up-level our Security Posture Management program to handle various issues identified by security tooling across our ecosystem.
• Leverage Dashboards and Visualization Tools to showcase our Vulnerability and Issue Management progress and current status.
• Manage Okta’s Security Posture Management program, including integrating data ingestion pipelines, coding logic to prioritize vulnerability fixes, supporting teams remediating issues coming out from various tools (ISPM, DSPM, Qualys, etc), and developing automated systems at scale.
• Configure and operationalize tools such as Snyk, Semgrep, and Qualys to expand scanning coverage for all TDI assets.
• Collaborate with teams to troubleshoot and remediate findings; provide technical mentorship to developers and admins.
• Based on findings from tools such as ISPM/SSPM, Snyk, Semgrep, Qualys, Cyera, and other security platforms, develop and maintain metrics, reporting, and executive visibility that drive ownership, accountability, prioritization, and measurable risk reduction across the organization.
• Partner with Security and GRC to communicate our risk posture and remediation status.
• Partner with product and engineering teams to advise on secure coding, build pipelines, and deployment best practices.
• Support and enforce ProdSec SDL adoption across business units, standardizing design reviews and requirements gathering.
• Implement secrets rotation automation and best practices for secrets management across TDI systems.
• Lead "shift left" security efforts to build security into the SDLC.
• Baseline Image & Environment Security Collaborate with SRE to manage update pipelines and enforce compliance with baseline standards.
• Conduct light Security Architecture Reviews (SARs) for lower environments to confirm proper controls and data handling.
• Develop agentic automation to scale security posture scanning, reporting, issue remediation, and patch validation.
• Identify and close gaps across CSPM, CI/CD pipeline security, and endpoint hardening.
• Provide technical guidance for integrating security into business and productivity platforms (Salesforce, ERP, Google Workspace, Slack, Zoom).

Requirements

You’ll bring to the role:

• 10+ years of experience in Security Engineering, DevSecOps, Infrastructure Security, or SaaS apps within a SaaS or enterprise environment.
• Hands-on technical expertise in the scanning, patching, and remediation of the issues across cloud, and SaaS ecosystems.
• Leverage creative and strategic thinking to promote risk reduction through secure design and simplicity.
• Possess broad security knowledge to connect the dots across security domains.
• Able to collaborate cross-functionally and balance security requirements with business objectives.
• Experience deploying and managing Snyk, Semgrep, and Qualys tools.
• Strong knowledge of AWS security practices, SRE principles, and securing business technology stacks (Salesforce, ERP, Google, Slack, Zoom).
• Proven ability to coach, mentor, and collaborate with development teams to improve remediation velocity.
• Practical understanding of secure SDLC / PDLC, supply chain security, and secrets management.
• Experience building security tools/applications, and automated tools.
• Effective communication skills to communicate strategically with higher-level leadership and with individual contributors.
• Proficient with visualization/BI tools to create dashboards and provide reporting to leadership and other key stakeholders.
• Experience in driving remediation across a variety of issues raised by posture management solutions.
• Excellent troubleshooting and communication skills, with a proactive and solution-oriented mindset.

Qualifications

Qualifications include:

• BS/MS in Computer Science, Information Security, or related field.
• CISSP, CISM, or equivalent certifications preferred.
• Experience with DevSecOps, CI/CD, and security automation tools.
• Knowledge of security frameworks such as NIST, CIS, OWASP, and others.
• Experience with security monitoring and incident response tools.
• Experience with security architecture and design principles.
• Experience with security policy development and implementation.
• Experience with security testing and assessment methodologies.

Skills

Skills required include:

• Deep technical security expertise.
• Ability to troubleshoot in complex environments and drive measurable improvements across the security posture management lifecycle.
• Strategic thinking to promote risk reduction through secure design and simplicity.
• Collaboration across multiple teams to balance security requirements with business objectives.
• Experience with security automation tools and continuous improvement.
• Expertise in security architecture and design principles.
• Knowledge of security frameworks and best practices.
• Experience with security monitoring and incident response tools.
• Experience with security policy development and implementation.
• Experience with security testing and assessment methodologies.

Benefits

At Okta, we offer a competitive compensation package, including:

• Annual base salary range for candidates located in the San Francisco Bay area: $134,000 USD - $184,800 USD.
• Equity (where applicable).
• Bonus.
• Benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave).
• Okta Experience: Supporting Your Well-Being, Driving Social Impact, Developing Talent and Fostering Connection + Community.
• Equal Opportunity Employer.