Staff Product Security Engineer (AI)

Location: Hybrid role in Toronto, Ontario, Canada

Annual base salary: CAD 141,000–193,000 for candidates located in Canada.

Company

Okta builds identity and access management infrastructure that secures organizations, products, and AI systems.

What you will do

• Conduct design reviews, threat modeling, penetration testing, and security assessments for new features and major changes.
• Perform manual secure code reviews across multiple programming languages and identify vulnerabilities.
• Guide engineering teams on secure development practices, risks, impact, and remediation.
• Lead product security incidents, risk assessments, and remediation efforts.
• Develop security tools and automation to improve vulnerability detection and assessment.
• Mentor junior engineers and represent Okta through security research, conference talks, and publications.

Requirements

• Expertise identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
• Strong penetration testing and secure development experience.
• Deep technical experience assessing Large Language Models and securing AI-integrated software architectures.
• Proficiency in multiple programming languages, such as Java, Go, Python, and C/C++.
• Deep understanding of OIDC, SAML, OAuth, authentication, and authorization.
• Experience automating security testing with LLMs and scripting, and leading security incidents and risk assessments.

Nice to have

• Mobile and desktop security testing experience.
• Familiarity with SAST, DAST, SCA, and fuzzing tools.
• Strong cryptographic knowledge and secure implementation experience.
• Network protocol and traffic security analysis experience.
• Ability to develop proof-of-concept exploits.

Culture & Benefits

• In-person onboarding experience designed to support connection and productivity.
• Health, dental, and vision insurance.
• RRSP with employer match, healthcare spending, and telemedicine.
• Paid leave, including PTO and parental leave.
• Equity and bonus opportunities where applicable.