This is a level-agnostic description; scope, autonomy, and leadership expectations scale with level (Senior through Staff).

Responsibilities:

• Research and lead how we can use AI to protect customer tenants — both proactively (hardening posture before an attack) and during active incidents (accelerating detection, triage, and response)
• Research and build protections against novel AI attacks that Auth0 and Auth0's customers can be subjected to — adversarial ML, prompt injection, abuse of agentic protocols (MCP, A2A, UCP, and emerging equivalents), model and data poisoning — as they apply to identity systems and customer tenants
• Partner with the identity security teams to help customers strengthen their own tenant security posture through AI-assisted defenses
• Research the emerging AI threat landscape and translate it into a forward-looking (12–24 month) view of what we need to protect ourselves and our customers from — then architect, recommend, and build the tooling to get there
• Review and harden Auth0's AI security offering, identifying gaps and recommending mitigations before they're exploited
• Partner across a globally distributed product-aligned team of security engineers to turn research into shipped protections for customer tenants
• Establish a deep understanding of Okta Customer Identity products and infrastructure
• Build, deploy & maintain scalable security solutions and automation that operationalize AI threat defenses at scale
• Help meet our operational security commitments by thinking like an attacker, assessing the risk, and advising on mitigation strategies
• Collaborate with the Okta Security team on security operations and, where relevant, support investigations and root cause analysis

What this position is not:

• Dedicated application security, code review, or compliance-focused work
• Reactive patch and vulnerability management as a primary function — this role is about getting ahead of threats, not chasing them

Requirements:

• You have hands-on experience with AI/ML security — attacking, defending, or both (e.g., adversarial ML, LLM/prompt-injection attacks, agentic-system or model abuse), and an interest in using AI to build defenses, not just to study attacks
• You have 4+ years of experience in security engineering, with a strong foundation in cloud infrastructure and/or product security
• You have hands-on development experience — Go preferred — sufficient to prototype tooling, build AI-powered defenses, and operationalize your research
• You have working knowledge and hands-on experience with one or more of the following:
• AWS and/or Azure security
• Kubernetes
• You have strong knowledge of OWASP (including the OWASP Top 10 for LLM Applications) and secure coding best practices
• You have a strong foundation in secure software development lifecycle best practices
• You have strong written and verbal communication skills, with the ability to turn research into clear guidance for engineering and product teams
• You have experience working with a globally distributed and remote team

Bonus points if:

• You have published threat research, CVEs, or conference talks in AI/ML security or identity security
• You have built AI/ML-powered security tooling or defensive automation in a production environment
• You have working knowledge and experience with one or more of the following:
• Adversarial ML, model red-teaming, or AI safety research
• The AI agent / MCP ecosystem and its security implications
• Identity and access management
• Full-stack engineering
• Site reliability engineering
• Vulnerability and threat management
• Governance, risk and compliance

#LI-Hybrid

# P25953_3566460

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.