Senior Software engineer - Advanced Threat Protection

Overview

Join Okta's new Advanced Threat Protection team within Auth0 Customer Identity as a Senior Security Engineer. The role researches how attackers will use AI against identity systems and builds AI-assisted defenses for Okta's products, infrastructure and customer tenants.

What you'll do

• Research and lead how AI can protect customer tenants, both proactively (hardening posture before an attack) and during active incidents (accelerating detection, triage and response).
• Research and build protections against novel AI attacks that Auth0 and its customers can face, including adversarial ML, prompt injection, abuse of agentic protocols (MCP, A2A, UCP and emerging equivalents), and model and data poisoning, as they apply to identity systems and customer tenants.
• Partner with identity security teams to help customers strengthen their own tenant security posture through AI-assisted defenses.
• Research the emerging AI threat landscape and translate it into a forward-looking 12–24 month view of what needs protecting, then architect, recommend and build the tooling to get there.
• Review and harden Auth0's AI security offering, identifying gaps and recommending mitigations before they are exploited.
• Partner across a globally distributed product-aligned team of security engineers to turn research into shipped protections for customer tenants.
• Establish a deep understanding of Okta Customer Identity products and infrastructure.
• Build, deploy and maintain scalable security solutions and automation that operationalize AI threat defenses at scale.
• Help meet operational security commitments by thinking like an attacker, assessing risk and advising on mitigation strategies.
• Collaborate with the Okta Security team on security operations and, where relevant, support investigations and root cause analysis.

What you'll need

• Hands-on experience with AI/ML security, attacking, defending or both (e.g., adversarial ML, LLM/prompt-injection attacks, agentic-system or model abuse), and an interest in using AI to build defenses.
• 4+ years of experience in security engineering, with a strong foundation in cloud infrastructure and/or product security.
• Hands-on development experience, Go preferred, sufficient to prototype tooling, build AI-powered defenses and operationalize research.
• Working knowledge and hands-on experience with one or more of: AWS and/or Azure security; Kubernetes.
• Strong knowledge of OWASP (including the OWASP Top 10 for LLM Applications) and secure coding best practices.
• Strong foundation in secure software development lifecycle best practices.
• Strong written and verbal communication skills, with the ability to turn research into clear guidance for engineering and product teams.
• Experience working with a globally distributed and remote team.

Nice to have

• Published threat research, CVEs, or conference talks in AI/ML security or identity security.
• Built AI/ML-powered security tooling or defensive automation in a production environment.
• Working knowledge and experience with one or more of: adversarial ML, model red-teaming or AI safety research; the AI agent / MCP ecosystem and its security implications; identity and access management; full-stack engineering; site reliability engineering; vulnerability and threat management; governance, risk and compliance.

Details

• Hybrid work (#LI-Hybrid).
• Level-agnostic description; scope, autonomy and leadership expectations scale with level (Senior through Staff).
• Globally distributed team.