SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Okta is seeking a Senior Security Engineer to join the Advanced Threat Protection team within Auth0 Customer Identity. This is a research-focused role that combines two critical functions: researching how attackers will leverage AI against identity systems, and researching and building AI-powered defenses for Okta's products, infrastructure, and customer tenants.
You will be a key member of the Security team embedded within the Customer Identity product unit, working across multiple functions to stay ahead of emerging AI threats while supporting the growth of Okta's global Customer Identity business. This is an engineering-focused role on the cutting edge of security technology and the threat landscape.
Key responsibilities include:
- Research and lead how AI can protect customer tenants both proactively (hardening posture before attacks) and during active incidents (accelerating detection, triage, and response)
- Research and build protections against novel AI attacks including adversarial ML, prompt injection, abuse of agentic protocols (MCP, A2A, UCP), and model/data poisoning as they apply to identity systems
- Partner with identity security teams to help customers strengthen tenant security posture through AI-assisted defenses
- Research the emerging AI threat landscape and develop a forward-looking 12–24 month view of protection needs, then architect and build the tooling to address them
- Review and harden Auth0's AI security offering, identifying gaps and recommending mitigations
- Partner across a globally distributed product-aligned team of security engineers to turn research into shipped protections
- Establish deep understanding of Okta Customer Identity products and infrastructure
- Build, deploy, and maintain scalable security solutions and automation that operationalize AI threat defenses at scale
- Collaborate with the Okta Security team on security operations, investigations, and root cause analysis
This role is NOT focused on dedicated application security, code review, compliance work, or reactive patch/vulnerability management. Instead, it emphasizes getting ahead of threats.
Requirements:
- Hands-on experience with AI/ML security (attacking, defending, or both)—e.g., adversarial ML, LLM/prompt-injection attacks, agentic-system or model abuse—with interest in using AI to build defenses
- 4+ years of security engineering experience with strong foundation in cloud infrastructure and/or product security
- Hands-on development experience (Go preferred) sufficient to prototype tooling, build AI-powered defenses, and operationalize research
- Working knowledge and hands-on experience with AWS and/or Azure security, and/or Kubernetes
- Strong knowledge of OWASP (including OWASP Top 10 for LLM Applications) and secure coding best practices
- Strong foundation in secure software development lifecycle best practices
- Strong written and verbal communication skills to translate research into clear guidance for engineering and product teams
- Experience working with globally distributed and remote teams
Bonus qualifications:
- Published threat research, CVEs, or conference talks in AI/ML security or identity security
- Built AI/ML-powered security tooling or defensive automation in production
- Experience with adversarial ML, model red-teaming, AI safety research, AI agent/MCP ecosystem security, identity and access management, full-stack engineering, site reliability engineering, vulnerability/threat management, or governance/risk/compliance
