Staff Product Security Engineer (Offensive Security)

Location: Dublin, Ireland

Salary: €90,000–€123,200 EUR annual base salary for candidates located in Ireland; equity, bonus, healthcare coverage, paid time off, and parental leave may also apply.

Company

Okta builds identity and access infrastructure that helps organizations securely use digital and AI technologies.

What You Will Do

• Identify, plan, and exploit complex security gaps across application, cloud, network, and identity layers.
• Conduct targeted security assessments and penetration tests, documenting findings, exploit reproduction steps, and architectural remediation guidance.
• Assess AI/LLM-integrated features and agent-based workflows, develop novel attack techniques, and evaluate defensive controls.
• Design, build, and maintain offensive automation frameworks, including fuzzers, scanners, and pipeline-integrated validation tools.
• Act as a security subject-matter expert across internal teams and represent Okta in internal and external forums.
• Triage internal vulnerability tickets and external bug bounty submissions periodically.

Requirements

• 5+ years of preferred experience in penetration testing web applications, related infrastructure, and networks.
• Extensive experience testing identity and access management platforms, multi-tenant SaaS architectures, or authentication and authorization systems.
• Experience or strong interest in AI/LLM security risks and developing offensive techniques against AI-integrated systems.
• Demonstrated experience building and shipping maintainable offensive security tooling beyond ad-hoc scripts.
• Experience operating within and securing cloud environments, with GCP required.
• Solid understanding of application security, common vulnerabilities, backend and middleware testing, network penetration testing, Linux, macOS, and cloud security architecture.
• Experience with SAML, OAuth 2.0, OIDC, infrastructure tooling including Kubernetes, Terraform, Chef, and ArgoCD, and Infrastructure as Code for building and testing environments.
• Familiarity with threat modeling concepts and frameworks, modern cryptographic principles, and their application.
• Ability to think strategically, develop comprehensive attack scenarios, and communicate technical findings and remediation strategies clearly to technical and non-technical audiences.
• Proactive learning about emerging threats, development of new security techniques, and experience or interest in mentoring and knowledge sharing.

Nice to Have

• Depth in AWS or Azure security.
• External publication of impactful security research through papers, blog posts, or industry conference presentations.

Culture & Benefits

• In-person onboarding experience designed to accelerate impact and build connections.
• Support for well-being, talent development, social impact, and community connection.
• Equity where applicable, performance bonus, comprehensive healthcare coverage, financial benefits, paid time off, and parental leave.
• Equal opportunity employment and reasonable accommodation during the application, interview, and onboarding process.