Requirements

6+ years of experience in Information Security with a focus on Product Security, Application Security, Vulnerability Management, and Security Operations
Working experience in conducting comprehensive security code reviews to identify vulnerabilities and code flaws
Working experience in Application Security vulnerabilities
Working experience in Product Security concepts
Working experience in risk management
Working experience in handling incident response for product-related issues
Knowledge of incident and log management tools
Excellent communication and collaboration skills, particularly in technical writing, process documentation, and executive presentations

What You'll Be Doing

Responsible for defining, improving, formalizing, and implementing Okta’s Product Security Incident Response Program for all products and business units
Responsible for the day-to-day operations of the bug bounty program, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and program process improvements.
Oversee the entire lifecycle from discovery to resolution, including triaging, impact assessment, coordination with engineering teams, and validating fixes while ensuring timely communication with internal and external stakeholders
Lead the overall security disclosure program, from triaging to disclosure
Report on the health of the program and the overall status of its activities
Collaborate with internal teams to improve workflows, governance, and communication of vulnerabilities and risks
Work closely with Engineering, IT, Product, Legal, and Security teams on cross-functional initiatives
Mentor and provide guidance to junior engineers on incident response procedures, technical investigations, and vulnerability remediation
Partner with leadership to drive proactive threat detection and vulnerability management