Product Security Engineer, Software Supply Chain - Canada - Okta

Description

Product Security Engineer, Software Supply Chain Okta

Okta's Workforce and Customer Identity Clouds enable secure access, authentication, and automation—putting identity at the heart of business security and growth.

View company page

Okta is The World's Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we're looking for lifelong learners and people who can make us better with their unique experiences. Join our team We're building a world where Identity belongs to you.

We are looking for a talented Security Engineer to join our Software Supply Chain Security Team, and help us enhance our application security program. As a Product Security Engineer, you will be contributing to the security of various aspects of Okta's Software Supply Chain Security posture, implementing services, and contributing to the definition of processes that mitigate risk in this space.

At our company, we value collaboration, teamwork, and innovation. This role will report to the Director of Application Security and will work closely with other members of the DevSecOps team. We are passionate about what we do and strive to create an inclusive and diverse workplace where everyone can thrive. If you are excited about this opportunity and meet the qualifications listed above, we encourage you to apply. We look forward to hearing from you.

The ideal candidate has strong Application Security knowledge, alongside a hands–on experience with automation through custom code.

Your main responsibilities will include:

• Implement automation, contributing to the implementation of internal, in-house developed systems to implement Okta specific requirements related to application vulnerability identification, tracking and reporting
• Participate in weekly rotations to support our Engineering team when triaging and remediating findings related to the team's initiatives
• Contribute to the definition of internal processes that allow for fast delivery of software to production systems through CI/CD pipelines while meeting security quality criteria with minimal effort
• Contribute to the team's strategy and planning, capitalizing on their security knowledge and the identification and prioritization of risk affecting Okta products

To be considered for this role, you should have:

• At least 3-5 years of experience in Application Security with a strong focus on security automation and application security at scale
• Strong knowledge of network and application security
• Functional knowledge of security code reviews (Java, .Net, Go, C, C++, C#, Ruby, Perl, Python, etc.). You should be able to read code and identify, explain, and propose remediations for the most common vulnerabilities in, at least, code bases for web applications in one of the languages listed.
• Software development experience in Python; or similar languages and being open to learning Python.

Additional skills we're looking for include:

• Experience with commercial and open-source security scanners in the SCA space, or provable experience implementing hardening measures in for SDLC pipelines
• Knowledge of at least one of AWS, GCP, Azure, etc.
• Experience with CI/CD pipelines, either on-prem or cloud .

Qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, or equivalent experience
• Industry certifications related to Application and Network Security, are a plus

Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: .

The annual base salary range for this position for candidates located in Canada is between:$99,000—$149,000 CAD

Get to know Okta

Okta is The World's Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we're looking for lifelong learners and people who can make us better with their unique experiences. Join our team We're building a world where Identity belongs to you.

We are looking for a talented Security Engineer to join our Software Supply Chain Security Team, and help us enhance our application security program. As a Product Security Engineer, you will be contributing to the security of various aspects of Okta's Software Supply Chain Security posture, implementing services, and contributing to the definition of processes that mitigate risk in this space.

At our company, we value collaboration, teamwork, and innovation. This role will report to the Director of Application Security and will work closely with other members of the DevSecOps team. We are passionate about what we do and strive to create an inclusive and diverse workplace where everyone can thrive. If you are excited about this opportunity and meet the qualifications listed above, we encourage you to apply. We look forward to hearing from you.

The ideal candidate has strong Application Security knowledge, alongside a hands–on experience with automation through custom code.

Your main responsibilities will include:

• Implement automation, contributing to the implementation of internal, in-house developed systems to implement Okta specific requirements related to application vulnerability identification, tracking and reporting
• Participate in weekly rotations to support our Engineering team when triaging and remediating findings related to the team's initiatives
• Contribute to the definition of internal processes that allow for fast delivery of software to production systems through CI/CD pipelines while meeting security quality criteria with minimal effort
• Contribute to the team's strategy and planning, capitalizing on their security knowledge and the identification and prioritization of risk affecting Okta products

To be considered for this role, you should have:

• At least 3-5 years of experience in Application Security with a strong focus on security automation and application security at scale
• Strong knowledge of network and application security
• Functional knowledge of security code reviews (Java, .Net, Go, C, C++, C#, Ruby, Perl, Python, etc.). You should be able to read code and identify, explain, and propose remediations for the most common vulnerabilities in, at least, code bases for web applications in one of the languages listed.
• Software development experience in Python; or similar languages and being open to learning Python.

Additional skills we're looking for include:

• Experience with commercial and open-source security scanners in the SCA space, or provable experience implementing hardening measures in for SDLC pipelines
• Knowledge of at least one of AWS, GCP, Azure, etc.
• Experience with CI/CD pipelines, either on-prem or cloud .

Qualifications:

• Bachelor's degree in Computer Science, Computer Engineering, or equivalent experience
• Industry certifications related to Application and Network Security, are a plus

#LI-Remote
#LI-CH1

Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: .

The annual base salary range for this position for candidates located in Canada is between:$99,000—$149,000 CAD

What you can look forward to as an Okta employee

• Amazing Benefits
• Making Social Impact
• Fostering Diversity, Equity, Inclusion and Belonging at Okta

Okta cultivates a dynamic work environment, providing the best tools, technology and benefits to empower our employees to work productively in a setting that best and uniquely suits their needs. Each organization is unique in the degree of flexibility and mobility in which they work so that all employees are enabled to be their most creative and successful versions of themselves, regardless of where they live. Find your place at Okta today .

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to participate in the job application or interview process, please use this Form to request an accommodation.

Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Privacy Policy at .

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr