Principal Detection and Response Engineer

Get to know Okta

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. 

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. 

Join our team! We’re building a world where Identity belongs to you.

Principal Detection and Response Engineer 

We safeguard Okta from threats and vulnerabilities that have the potential to disrupt our business or degrade our customers’ trust in us.

In addition to driving security in our enterprise environment and Okta service, the Security team is deeply entrenched in the Okta business. The team contributes to product roadmaps, promoting trust, research and other strategic aspects of Okta’s operations. We work across multiple functions, business partners and the research community. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape.

Okta is seeking an experienced Principal Engineer, Detection and Response to take on a key role as a senior technical expert within Okta’s Cyber Defense team, reporting to the Senior Manager of Defensive Cyber Operations (Americas). You will be responsible for designing, implementing, and optimizing threat detection, incident response, and security automation solutions and ensuring they are continuously validated. You will work closely with engineers and leadership to enhance Okta’s ability to detect, investigate, and respond to sophisticated cyber threats.

• Design, develop, and optimize security detection capabilities across Okta’s infrastructure and applications ensuring optimal coverage across the organization.
• Build and refine advanced security detections using custom detection pipelines, EDR, cloud-native security tools, and behavioral analytics.
• Partner with security engineers to improve alert fidelity and reduce false positives.

• Serve as a senior escalation point for complex security incidents, leading technical investigations and root cause analyses.
• Take part in the DCO watch roster triaging alerts escalated via automated processes, internal reports, and third-party notifications.
• Develop and implement forensic analysis techniques to investigate security …