Greenhouse ·
full-timeStaff Product Security Engineer, Offensive Security Team
Okta · Dublin, Ireland
Okta is an identity and access management company that provides infrastructure to secure human and AI-driven digital identities. As a Staff Product Security Engineer on the Offensive Security Team, you will be responsible for proactively identifying and exploiting security vulnerabilities across the company's products, services, and cloud infrastructure. The role requires a sophisticated attacker mindset to move beyond standard vulnerability scanning, focusing instead on complex, multi-layered security assessments. You will be tasked with testing identity protocols like SAML, OAuth, and OIDC, as well as evaluating the security posture of AI and LLM-integrated systems. A significant portion of the work involves developing custom offensive tooling, automation frameworks, and fuzzers to scale security coverage. You will also serve as a subject matter expert, providing remediation guidance to engineering teams and contributing to the broader security community through research and publications. This position is ideal for an experienced security professional with a deep background in penetration testing, cloud architecture, and infrastructure as code who thrives on solving high-stakes technical challenges in a fast-paced environment.
Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Staff Product Security Engineer, Offensive Security Team The Offensive Security Team, part of Product Security, actively assesses the security of Okta's products, services, and infrastructure, and we are seeking a highly technical and driven staff-level engineer to contribute to this effort. This role demands more than running vulnerability scans. Excelling here requires a thorough understanding of offensive security testing and a strong drive to identify and leverage security weaknesses. Above all, the most critical attribute of this role is an innate ability to think and operate as a sophisticated adversary. This skill is key to solving security challenges, drawing on deep technical expertise and creativity. The ideal candidate will possess demonstrable expertise in the following areas: Application & Network Security: Solid understanding of application security principles, common vulnerabilities, backend/middleware testing, and network penetration testing methodologies. Identity Security: Experience testing identity and access management systems, including authentication protocols such as SAML, OAuth 2.0, and OIDC, and their associated attack surfaces. AI/LLM Security: Experience assessing the security of systems that integrate large language models and AI-driven automation, including supply-chain risks in model pipelines. Ability to develop novel attack techniques against AI-augmented products and evaluate guardrail effectiveness. Automation & Offensive Tooling: A track record of building maintainable, repeatable Offensive Security tools that accelerate security assessments, automate vulnerability discovery, and integrate with existing workflows. Operating Systems: Thorough familiarity with Linux and macOS operating systems, including their security features, command-line tools, and common attack surfaces. Cloud Security: Understanding of cloud security architecture and common attack vectors. Experience with GCP is required, and depth in AWS or Azure is also welcomed. Infrastructure & DevOps: Experience with infrastructure tooling such as Kubernetes, Terraform, Chef, and ArgoCD, and an understanding of how they shape the operational environment. Communication: Excellent written and verbal communication skills with the ability to clearly and concisely articulate vulnerabilities and remediation strategies to technical and non-technical audiences. We actively encourage and support the external publication of impactful security research and findings through papers, blog posts, and presentations at industry conferences. What You Will Do Apply an attacker mindset to identify, plan, and exploit complex security gaps across app, cloud, and network layers. Conduct targeted security assessments and pentests; deliver actionable findings, detailed exploit recreation, and architectural remediation guidance. Assess the security of AI/LLM-integrated features and agent-based workflows, develop novel attack techniques, and evaluate defensive controls. Design, build, and maintain offensive automation frameworks that scale security coverage from custom fuzzers and scanners to pipeline-integrated validation tools. Act as a security SME across internal teams and represent Okta in internal and external forums when appropriate. Periodically triage internal vulnerability tickets and external bug bounty submissions. What You Bring Demonstrable experience in penetration testing web applications, related infrastructure, and networks (5+ years preferred) Extensive experience testing identity/IAM platforms, multi-tenant SaaS architectures, or authentication/authorization systems Familiarity with AI/LLM security risks and experience or strong interest in developing offensive techniques against AI-integrated systems Track record of building and shipping offensive security tooling beyond ad-hoc scripts Experience in operating within and securing cloud environments (GCP required) Familiarity with Threat Modeling concepts and frameworks Experience with Infrastructure as Code (e.g., Terraform) for building and testing environments Solid understanding of modern cryptographic principles and their application Ability to think strategically and develop comprehensive attack scenarios Effective communication skills for conveying technical security findings to various audiences A proactive approach to learning about emerging threats and developing new security techniques Experience or interest in mentoring and sharing knowledge with tea
| Role | Staff Product Security Engineer, Offensive Security Team |
|---|---|
| Company | Okta |
| Location | Dublin, Ireland |
| Type | full-time |
| Compensation | Not disclosed |
| Posted | 2026-10-19 |
| Deadline | Rolling |
Typical process for this type of role
A general guide — the exact steps for this specific listing may vary; check the original posting for details.
- 1ApplicationSubmit your resume through the apply link.
- 2ScreeningRecruiter reviews your background against the role.
- 3AssessmentA technical test, assignment, or coding round, depending on the role.
- 4Interview(s)One or more rounds with the hiring team.
- 5OfferOffer letter with compensation and start date.
Before you apply
0/4About Okta
Okta, Inc. is an Identity-as-a-Service (IDaaS) company founded in 2009 and based in San Francisco. The company provides identity and access management solutions for workforces, customers, and AI agents. Its offerings include the Okta Platform for governance and the Auth0 Platform for authentication. Okta’s services are designed to secure human and machine identities, helping organizations manage access across their digital ecosystems. The company serves a diverse client base, including major government agencies and two-thirds of the Fortune 100, supporting thousands of organizations globally in securing their business operations and digital infrastructure.
More at Okta
Other jobs at Okta
- Senior Technology Specialist, Executive Support · San Francisco, California
- Program Manager, Climate · Bellevue, Washington; Chicago, Illinois
- Senior Technical Consultant, Okta · Washington, DC
- Senior People Consultant EMEA · Dublin, Ireland
- Senior Regional Alliances Manager · Sydney, Australia
Explore Related Placements
// similar opportunities
You might also like
Staff Software Engineer - Product Security
Servicenow
No description available.
Product Security Engineer
Salesforce
No description available.
Product Security Engineer
Asana
At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team prot...
Sr Staff Product Security Engineer - Product Security Incident Response Team (psirt)
Servicenow
No description available.
Senior Software Engineer - Product Security
Faire
About Faire Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent...
Staff Product Engineer
Intercom
Fin , now part of Salesforce, is on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Ag...