Senior Software Engineer, Security (Java)

Job Description

Get to know OktaOkta is The Worlds Identity Company. We free everyone to safely use any technologyanywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - were looking for lifelong learners and people who can make us better with their unique experiences. Join our team! Were building a world where Identity belongs to you.Oktas Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate software security engineer to join a team focused on designing and developing Security solutions to harden our frameworks & infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security software solutions that help run large-scale, mission-critical software. We encourage you to prescribe defense-in-depth measures, industry security standards, enforce the principle of least privilege to help take our Security posture to the next level. Our Security engineering team has a niche skill-set that combines Security domain expertise with the ability to design, implement and rollout security features and functionalities without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product.This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the engineering org to build technical leverage and influence the security roadmap and direction. You will focus on engineering security and privacy aspects of the systems used across our services while working on a weekly release cadence. You will be empowered to propose stimulating new projects for our roadmap and rewarded with projects using emerging technologies. Join us and be part of a company that is about to change the cloud computing landscape forever. Bring all the passion and dedication along and theres no telling what you could accomplish!Preferred qualifications and abilities:

• 4 years of development experience in designing and implementing software systems in Java, building highly reliable and mission-critical software.
• 2 years of work experience in designing and implementing security solutions for applications and distributed systems.
• Work experience and excellent understanding in mitigating OWASP Top 10 attacks on applications, Application Security, Cryptography, Authentication, Authorization using Role-Based and Attribute-Based access controls.
• Strong understanding of concepts such as Test-Driven development, Secure SDLC, Secure code reviews and the ability to identify and mitigate threat vectors and vulnerabilities in code and infrastructure.
• Good understanding and experience in using cloud service providers such as AWS and GCP.
• Developing and maintaining technical documentation such as cookbooks, design and architecture docs.
• Troubleshooting and fixing production issues to ensure reliability, security and performance.
• Work experience in using RDBMS like MySQL, good grasp of concepts such as replication and clustering along with familiarity in data stores such as Redis and Elasticsearch.
• Excellent grasp of software engineering principles coupled with strong written and verbal communication skills.
• B.S or M.S in Computer Science or related fields.

Responsibilities:

• Act as a liaison between the engineering and security org to develop innovative requirements for the security roadmap.
• Evangelize security best practices across the engineering org.
• Research, design, implement and own security oriented frameworks and features with the common goal of protecting Oktas customers.
• Routinely participate in cross-vertical code reviews with emphasis on Security.
• Break down complex problems into sub-tasks while prototyping rapidly and iteratively contributing to security initiatives using agile practices.
• Coach and mentor junior engineers in the team.

What you can look forward to as a Full-Time Okta employee!

• Amazing Benefits
• Making Social Impact
• Developing Talent and Fostering ConnectionCommunity at Okta

Okta cultivates a dynamic work environment, providing the best tools, technology and benefits to empower our employees to work productively in a setting that best and uniquely suits their needs. Each organization is unique in the degree of flexibility and mobility in which they work so that all employees are enabled to be their most creative and successful versions of themselves, regardless of where they live. Find your place at Okta today! Okta Careers. Some roles may require travel to one of our office locations for in-person onboarding.Equal Opportunity EmployerOkta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Privacy Policy at Okta Privacy Policy.Locations

• Bengaluru

Keyskills :
software security engineering java development experienceapplication security solutions threat mitigation techniques cloud service providers mysql software engineering cloud computing rdbms cryptography infrastructure