Lead Okta's PSIRT program across all business units, defining its strategy, roadmap and operating model

Own the vulnerability-handling lifecycle, from intake and triage through remediation, coordinated disclosure and post-incident review, and keep our procedures and runbooks current

Act as senior incident lead on Critical and high-profile vulnerabilities, including industry-wide issues, and make clear calls under pressure

Partner with Engineering leaders to drive fixes and hotfixes on time, while engineering owns remediation

Run coordinated disclosure with researchers and partners, and own Okta's CVE and security advisory process with Customer Trust and Security Communications

Work closely with Cyber Defense, Identity Defense, Legal and Federal teams on exploitation analysis, customer impact and regulatory obligations

Own the bug bounty program and relationships with the security research community

Scale the team with automation and AI: agentic triage, root-cause and variant analysis, and tooling that holds up under a surge in volume

Set and report key performance indicators (time to acknowledge, time to resolve, SLA attainment, advisory timeliness) to security and executive leadership

Brief executives clearly and in proportion to risk, and lead post-incident reviews that feed lessons back into the Secure Development Lifecycle

Maintain and strengthen a team culture of growth, openness, trust, rigor, humility, and mutual support

Lead the process of recruiting great engineers to meet the growth plan for the team in collaboration with our recruiters

Director, Product Security, PSIRT

Responsibilities

Benefits

Company

Okta

More roles at Okta