Staff Product Security Engineer, Offensive Security Team

Dublin · 5+ years experience · Posted Oct 19, 2026

At a glance

The Offensive Security Team at Okta is seeking a staff-level engineer to actively assess the security of products, services, and infrastructure. This role requires an attacker mindset to identify complex security gaps, with a specific focus on AI/LLM-integrated features and identity systems.

Apply an attacker mindset to identify, plan, and exploit complex security gaps across app, cloud, and network layers.
Conduct targeted security assessments and pentests.
Deliver actionable findings, detailed exploit recreation, and architectural remediation guidance.
Assess the security of AI/LLM-integrated features and agent-based workflows.
Develop novel attack techniques against AI-integrated systems and evaluate defensive controls.
Design, build, and maintain offensive automation frameworks that scale security coverage.
Act as a security SME across internal teams.
Represent Okta in internal and external forums.
Periodically triage internal vulnerability tickets and external bug bounty submissions.

Demonstrable experience in penetration testing web applications, related infrastructure, and networks.
Extensive experience testing identity/IAM platforms, multi-tenant SaaS architectures, or authentication/authorization systems.
Familiarity with AI/LLM security risks and experience or strong interest in developing offensive techniques against AI-integrated systems.
Track record of building and shipping offensive security tooling beyond ad-hoc scripts.
Experience in operating within and securing cloud environments (GCP required).
Familiarity with Threat Modeling concepts and frameworks.
Experience with Infrastructure as Code (e.g., Terraform) for building and testing environments.
Solid understanding of modern cryptographic principles and their application.
Effective communication skills for conveying technical security findings to various audiences.