SlipstreamJobsFresh Startup & VC-Backed Jobs

Staff Product Security Engineer, PSIRT

Okta - Barcelona, Catalonia, Spain - In-office - posted 2026-07-29

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

Salary: EUR 74,000 - 101,000 / annual

Okta is seeking a Staff Product Security Engineer to lead the Product Security Incident Response Team (PSIRT). This is a strategic role responsible for defining, improving, and implementing Okta's product security incident response program across all products and business units. Key responsibilities include: - Owning the day-to-day operations of Okta's bug bounty program, including researcher engagement, vulnerability triage, severity assessment, remediation coordination, and reward recommendations - Managing the entire vulnerability lifecycle from discovery through resolution, including impact assessment, engineering coordination, fix validation, and stakeholder communication - Leading the security disclosure program from initial triage to public disclosure - Reporting on program health and activity status to leadership - Collaborating with Engineering, IT, Product, Legal, and Security teams on cross-functional vulnerability management initiatives - Mentoring junior engineers on incident response procedures, technical investigations, and vulnerability remediation - Driving proactive threat detection and vulnerability management strategies - Improving internal workflows, governance, and communication around vulnerabilities and risks Required qualifications: - 6+ years in Information Security with focus on Product Security, Application Security, Vulnerability Management, or Security Operations - Hands-on experience conducting comprehensive security code reviews - Working knowledge of Application Security vulnerabilities and Product Security concepts - Experience with incident response for product-related issues - Risk management expertise - Proficiency with incident and log management tools - Excellent technical writing, process documentation, and executive communication skills This role offers the opportunity to shape security practices at a leading identity-as-a-service provider serving thousands of enterprises globally.

Similar roles