Staff Software Engineer, Security

Okta Okta · Enterprise · Toronto, ON · Security Engineering-695

Staff Software Engineer, Security at Okta, focusing on securing AI by building trusted infrastructure. The role involves designing and developing security solutions to harden frameworks and infrastructure, acting as a liaison between security and engineering, and implementing AI-based security solutions. Requires strong software engineering and security experience, with an understanding of AI secure by design practices.

What you'd actually do

  1. Act as a liaison between the engineering and security org to develop innovative requirements for the security roadmap
  2. Evangelize security best practices across the engineering org
  3. Research, design, implement and own security oriented frameworks and features with the common goal of protecting Okta’s customers
  4. Routinely participate in cross-vertical code reviews with emphasis on Security
  5. Break down complex problems into sub-tasks while prototyping rapidly and iteratively contributing to security initiatives using agile practices

Skills

Required

  • Java
  • designing and implementing security solutions
  • mitigating OWASP Top 10 attacks
  • Application Security
  • Cryptography
  • Authentication
  • Authorization using Role-Based and Attribute-Based access controls
  • Test-Driven development
  • Secure SDLC
  • Secure code reviews
  • AWS
  • GCP
  • AI Secure by Design practices
  • secure coding for AI-powered applications
  • validating the integrity of training datasets
  • AI-based security solutions
  • automated threat analysis
  • RDBMS like MySQL
  • replication and clustering
  • Redis
  • Elasticsearch
  • software engineering principles
  • written and verbal communication skills
  • B.S or M.S in Computer Science or related fields

Nice to have

  • Coach and mentor junior engineers

What the JD emphasized

  • 8+ years of development experience in designing and implementing software systems in Java, building highly reliable and mission-critical software
  • 4+ years of work experience in designing and implementing security solutions for applications and distributed systems
  • Work experience and excellent understanding in mitigating OWASP Top 10 attacks on applications, Application Security, Cryptography, Authentication, Authorization using Role-Based and Attribute-Based access controls
  • Good understanding of 'AI Secure by Design' practices throughout the development lifecycle, ensuring secure coding for AI-powered applications and validating the integrity of training datasets
  • Engineer and implement AI-based security solutions (e.g., automated threat analysis) that enhance application and infrastructure security

Other signals

  • AI-based security solutions
  • secure coding for AI-powered applications
  • validating the integrity of training datasets