Senior Security Engineer, Security Response Okta, Inc.
San Francisco, CA

Job Description

You will be a part of Okta's defensive security team and make significant contributions to security response initiatives surrounding the Okta platform, infrastructure, and corporate environment. You will apply cooperation, communication, analysis, and automation skills while working with the various teams that create Okta's products and propel the company forward.

What We Do:

* Triage, investigate, and take action on a wide variety of security events
* Remediate security issues across application layer (such as web attacks and account take-over), infrastructure (suspicious network or OS activity, changes to cloud resource permissions), and corporate (phishing emails, suspicious domain registrations, etc)
* Deploy and improve commercial and Open Source tools to assist with security response
* Automate actions to reduce response latency and improve consistency
* Write and improve procedures and playbooks for handling security events
* Conduct security reviews of cloud infrastructure accounts to proactively identify problems and ensure they're assigned for resolution
* Help craft management reports for ongoing security incidents
* Make suggestions for process improvements and take responsibility for collaborating with stakeholders to implement those improvements

Why You Want to Work Here:

* We handle a huge volume of enterprise authentication traffic and see interesting attacks every day
* We pick tools to fit the job, whether commercial, Open Source, or homegrown
* We don't just identify problems, we help solve them. Whether it is a malware alert or a product design flaw, our team is involved in the solution, not merely throwing it over the fence to some other team to deal with
* We believe everyone has a unique and valuable perspective on security and great candidates come from all kinds of backgrounds

What You Bring to Okta:

* Collaborative approach to solving complex problems involving multiple teams and competing priorities
* Experience investigating a variety of sources, such as macOS, Linux, Network IDS, web applications, DNS, certificate transparency logs, etc
* Ability to take a complex security response question and break it down into various investigation tasks with dependencies
* Experience owning and coordinating response efforts to security incidents, such as identifying key stakeholders to notify, tracking outstanding items, and communicating status updates to the organization
* Past experience automating security actions, especially remediation or alert enrichment/post processing
* A solid grasp of how the web works, understanding of various web application architecture components, and knowledge of how attackers exploit these components
* You enjoy creating playbooks and how-tos almost as much as working on high-pressure security incidents
* Understanding that attackers don't work 9 to 5 and sometimes we can't either
* Bachelor's degree in Computer Science, Computer Engineering or equivalent experience

Bonus Skills:

* Past experience implementing or leveraging a SOAR platform or similar capability
* You have experience working at a cloud service provider
* Familiarity with at least some AWS services
* Previous experience with in-depth host and network based forensics investigations
* Previous experience being part of a large scope security incident
* Deep understanding of OS fundamentals on Linux, macOS, or Windows
* Decent understanding of encryption fundamentals
* Calm and collected demeanor



Okta is an Equal Opportunity Employer

#LI-CH1