Staff Security Analyst, Customer Assurance

Responsibilities

• Serve as the critical bridge between Okta’s customers and internal Engineering/Product Security teams: unpack complex customer security concerns, hold in-depth technical discussions with engineering to align on solutions, and translate Okta’s security architecture back to the customer.
• Act as a bilingual "technical translator," converting deep-dive engineering specifications and vulnerability reports into clear, risk-based narratives that address customer concerns while protecting Okta’s intellectual property.
• Serve as the primary security advocate for Field Account Teams to provide technical clarity on Okta’s security posture, roadmap, and incident response protocols.
• Collaborate with Product and Engineering teams to "pre-digest" upcoming features and security enhancements, ensuring the Field teams are armed with accurate technical talking points.
• Take end-to-end ownership of highly technical security questionnaires and due-diligence requests. Partner with internal subject matter experts—including specialized Federal/FedRAMP teams—to ensure accurate, timely, and high-quality responses.
• Drive technological changes within Customer Assurance by identifying and implementing AI and automation strategies to streamline workflows, scale global efforts, and reduce response times.
• Train and empower regional Go-To-Market and Sales teams on standard engagement protocols.
• Collaborate with the Security Trust & Culture team and Regional CSOs to develop, publish, and maintain forward-facing security collateral, FAQs, and field communications.
• Work within a global team, participating or leading global handoffs between American timezones and European or Asian timezones when required.

Requirements

• Bachelor’s degree in Computer Science or Management Information Systems, or equivalent work experience in technology or information security fields.
• Minimum 3 years information security, project management, or related experience.
• Strong, fundamental understanding of core Security principles, architectures, and operations.
• Understanding of IT and cloud methodologies, information security, privacy, identity management, risk assessments and IT regulation and compliance standards.
• Strong oral, written, and presentation skills.
• Strong written and verbal communication skills, with a proven ability to distill complex technical concepts into clear, concise responses for both technical customers and internal executive stakeholders.
• Ability to engage in "whiteboard-level" security discussions with customer CISOs and architects, specifically regarding cloud infrastructure, API security, and encryption standards.
• Demonstrated experience managing the "tension" between technical limitations and customer expectations, with a knack for finding creative ways to say "yes" to security requirements through compensating controls.
• Strong ability to pivot from a "checker" (simply answering questions) to a "consultant" (helping the customer and Field teams understand the why behind Okta’s security controls).

Nice-to-Haves

• Okta Certified Professional/Administrator.
• Certificate of Cloud Security Knowledge (CCSK) and/or Certificate of Cloud Auditing Knowledge (CCAK).
• Certified Information Security Auditor (CISA).
• Experience with generative AI tools or process automation platforms.
• Familiarity with Federal or highly regulated compliance frameworks (e.g., FedRAMP, StateRAMP, NIST 800-53, or DoD IL4/IL5/IL6).