Описание

Okta provides Workforce and Customer Identity Clouds that enable secure access, authentication, and automation. Its identity infrastructure helps organizations safely use technology across devices and applications while supporting business security and growth.

Задачи

Define, improve, formalize, and implement Okta's Product Security Incident Response Program across all products and business units

Operate the bug bounty program, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and process improvements

Oversee the lifecycle from vulnerability discovery to resolution, including triage, impact assessment, engineering coordination, fix validation, and stakeholder communication

Lead the security disclosure program from triage through disclosure

Report on program health and activity status

Collaborate with internal teams to improve vulnerability and risk workflows, governance, and communication

Work with Engineering, IT, Product, Legal, and Security teams on cross-functional initiatives

Mentor junior engineers on incident response procedures,



technical investigations, and vulnerability remediation

Partner with leadership to drive proactive threat detection and vulnerability management

Требования

6+ Years of experience in Information Security focused on Product Security, Application Security, Vulnerability Management, and Security Operations

Experience conducting comprehensive security code reviews to identify vulnerabilities and code flaws

Experience with Application Security vulnerabilities

Experience with Product Security concepts

Experience with risk management

Experience handling incident response for product-related issues

Knowledge of incident and log management tools

Excellent communication and collaboration skills, including technical writing, process documentation, and executive presentations

Условия

Annual base salary range for candidates located in Spain: €74.000 EUR - €101.000 EUR

Equity where applicable, bonus, comprehensive healthcare coverage, paid time off, and parental leave

In-person onboarding experience

📌 security engineer in identity security (Madrid)
🏢 Enfint
📍 Madrid