About
Okta provides Workforce and Customer Identity Clouds that enable secure, flexible access, authentication, and automation. Its identity infrastructure helps organizations use technology safely and supports business security and growth.
Responsibilities
•Define, improve, formalize, and implement the Product Security Incident Response Program across all products and business units
•Manage day-to-day bug bounty program operations, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and process improvements
•Oversee the vulnerability lifecycle from discovery to resolution, including triage, impact assessment, engineering coordination, fix validation, and timely stakeholder communication
•Lead the security disclosure program from triage through disclosure
•Report on program health and activity status
•Improve vulnerability and risk workflows, governance, and communication with internal teams
•Collaborate with Engineering, IT, Product, Legal, and Security teams on cross-functional initiatives
•Mentor junior engineers on incident response procedures, technical investigations, and vulnerability remediation
•Partner with leadership to advance proactive threat detection and vulnerability management
Requirements
•6+ years of experience in Information Security, focused on Product Security, Application Security, Vulnerability Management, and Security Operations
•Experience conducting comprehensive security code reviews to identify vulnerabilities and code flaws
•Experience with Application Security vulnerabilities
•Experience with Product Security concepts
•Experience in risk management
•Experience handling incident response for product-related issues
•Knowledge of incident and log management tools
•Excellent communication and collaboration skills, including technical writing, process documentation, and executive presentations
Conditions
•Annual base salary range for candidates located in Spain: €74,000 — €101,000 EUR
•Equity, where applicable
•Bonus
•Comprehensive healthcare coverage and financial benefits
•Paid time off and parental leave in accordance with applicable plans and policies
•In-person onboarding experience
