Requirements

• Demonstrable experience in penetration testing web applications, infrastructure, and networks (5+ years preferred)
• Extensive experience testing identity and access management (IAM) platforms, multi-tenant SaaS architectures, or authentication/authorization systems
• Strong understanding of application security principles, common vulnerabilities, backend/middleware testing, and network penetration testing methodologies
• Experience testing identity and access management systems including protocols such as SAML, OAuth 2.0, and OIDC
• Familiarity with AI/LLM security risks or a strong interest in developing offensive techniques against AI-integrated systems
• Track record of building and shipping maintainable offensive security tooling beyond ad-hoc scripts
• Experience operating within and securing cloud environments, with required experience in GCP
• Familiarity with Threat Modeling concepts and frameworks
• Experience with Infrastructure as Code (e.g., Terraform) for building and testing environments
• Solid understanding of modern cryptographic principles and their application
• Ability to think strategically and develop comprehensive attack scenarios
• Effective written and verbal communication skills to convey technical findings to both technical and non-technical audiences
• A proactive approach to learning about emerging threats and developing new security techniques
• Experience or interest in mentoring and knowledge-sharing within teams

Nice to Haves

• Experience with cloud platforms beyond GCP, such as AWS or Azure
• Understanding of infrastructure tooling such as Kubernetes, Terraform, Chef, and ArgoCD
• Experience with AI/LLM security, including assessing supply-chain risks and evaluating guardrails

What You'll Be Doing

• Applying an attacker mindset to identify, plan, and exploit complex security gaps across application, cloud, and network layers
• Conducting targeted security assessments and penetration tests with detailed exploit recreation and architectural remediation guidance
• Assessing security of AI/LLM-integrated features and agent-based workflows, developing novel attack techniques, and evaluating defensive controls
• Designing, building, and maintaining offensive automation frameworks, including custom fuzzers, scanners, and pipeline-integrated validation tools
• Acting as a security subject matter expert (SME) across internal teams and representing Okta in internal and external forums
• Periodically triaging internal vulnerability tickets and external bug bounty submissions

Perks and Benefits

• Annual salary range for Ireland: €90,000 – €123,200 EUR, dependent on skills, qualifications, and experience
• Equity (where applicable), bonus, and comprehensive healthcare coverage
• Financial benefits including paid time off and parental leave in accordance with company policies
• Support for external publication of security research, through papers, blogs, and industry presentations
• Immersive, in-person onboarding experience to accelerate impact and foster connection
• Inclusive and equal opportunity employer committed to diversity, equity, and accommodation needs
• Global community with over 20 offices worldwide focused on innovation and social impact