Cinematographer -- New York

Information Security is a top business imperative at Okta. In addition to driving security in our Corporate environment and Okta service, the Security team is deeply entrenched in the Okta business. As such, we contribute to product roadmaps, branding, research and other strategic aspects of our operations. We work across multiple functions, business partners and the research community. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape.

The Defensive Cyber Operations (DCO) team is seeking an experienced adversarial engineering leader to enable Okta’s detection and response programs responsible for defending the Okta platform, infrastructure and corporate environment.

The Role

You will operate as part of the DCO leadership team, taking ownership of building and maintaining the adversarial engineering capability to enable Okta’s intel-driven approach to defensive cyber operations. Core responsibilities include:

• Lead the development of automated testing and validation capabilities for Okta’s defensive capabilities
• Analyze Okta’s systems in order to identify and close gaps in detection and response coverage
• Emulate adversary capabilities identified and prioritized by Okta’s cyber threat intelligence capability, delivering test cases and data to enable detection development and validation
• Determine and address needs for tools and data that will enable adversarial engineering outputs
• Identify and report the most important metrics to measure success of the adversarial engineering program
• Mentor and coach employees, providing advice for performance improvements and career guidance.

What does it take? 

You’re a team player. You have great communications skills and a thirst for knowledge. You’re curious about systems and how they interact, knowing that to properly defend a system you must first understand how it works. You enjoy automating tasks and if you can’t find a tool for the job you create one. You’re calm under pressure and have a good internal compass for taking calculated risks.

If you don’t have a degree, you have equivalent experience that’s given you the foundational knowledge to understand complex computing environments.

You’re a leader. People want to work with you. You know what it takes to build a world-class defensive cyber capability and you’re passionate about helping makes ours stronger. Your experience probably includes:

• Leading, or contributing to, technology focused teams large or small.
• Mentoring staff and providing development opportunities to build high performing teams.
• Developing detection and response validation techniques and automating tests to enable continuous assurance of defensive cyber capabilities.
• Researching the tactics, techniques and procedures (TTPs) and tools used by sophisticated adversaries and emulating those capabilities within corporate and production environments.

Ideally you also have experience in several of the following areas: 

• Operating as, or providing support to, the incident commander or technical lead during cyber security incidents.
• Developing advanced detection capabilities and automating the triage and response to the alerts they generate.
• Responding to cyber security incidents whether as a consultant or internally for your organization.
• Analyzing critical systems to understand both how to break them and defend them against attack.
• Working collaboratively within product and/or enterprise project teams, assisting to deliver large and complex technology solutions.