Staff Site Reliability Engineer (SRE), Vulnerability Analyst

Get to know Okta

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. 

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. 

Join our team! We’re building a world where Identity belongs to you.

Staff Vulnerability Management Analyst

The Okta Security team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solutions through identifying and resolving risks to the employees, product, and most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business. 

The Vulnerability Management Analyst is a key member of the Okta Security team and an essential collaborator with our broader Engineering organization. Reporting to the Director of Vulnerability Management, the Vulnerability Management Analyst will play a key part in executing the Vulnerability Management Program’s strategy. The Vulnerability Management Program is a crucial pillar of the security organizations’ imperative to reduce the threats to Okta’s infrastructure and applications. You’ll be an integral part of building and sustaining strong and effective relationships across Okta with our Engineering, Product and Business Technology counterparts.

What You'll Do

• Deploy, manage, maintain, configure, extend and automate vulnerability scanning infrastructure and services.
• Build scripts and software modules to verify the presence of vulnerabilities.
• Develop and implement alerting regarding scan environment health checks as well as vulnerability notification.
• Keep up with newly published vulnerabilities/ CVEs and zero-days.
• Investigate vulnerability findings present within the environment, and coordinate remediation efforts in collaboration with other IT teams and subject matter experts.
• Monitor and maintain awareness of critical vulnerabilities, driving patch management or mitigating processes to reduce impact.
• Document, review and deliver requirements and recommendations related to vulnerability remediation which follow common industry standards and security frameworks.
• Assist business stakeholders in assessing risk and prioritizing vulnerability remediation. Assist in providing risk context to vulnerability reports given the infrastructure purpose.
…