Senior Productivity Security Analyst, Business Technology

The Business Technology Team is vital to Okta's mission to accelerate Okta's scale and Growth. As a key team member, you'll thrive in a dynamic environment where collaboration, accountability, and delivering business outcomes are at the forefront. We're looking for motivated individuals energized by solving complex challenges, shaping the future of technology, and making a tangible impact on Okta's success.

Role Overview: We seek a detail-oriented and motivated Productivity Security Analyst to join our BT Security team within Business Technology. This role is critical in safeguarding Okta's vital ecosystem of SaaS-based productivity and collaboration applications. You will be responsible for assessing risks, defining and implementing security controls, and driving improvements specifically within our diverse SaaS environment. Key focus areas include SaaS Security Posture Management (SSPM) integrations with business-critical applications and supporting the implementation of secrets scanning within collaboration tools and connected applications, ensuring these essential platforms are configured and used securely. The ideal candidate is passionate about SaaS security, adept at translating requirements into actionable steps, skilled in effective communication, and experienced in implementing best security practices for cloud applications.

This role may require travel to one of our hub offices (e.g., San Francisco, CA, or Chicago, IL) for occasional collaboration or team events. [Adjust or remove per actual policy.] If a reasonable accommodation is needed to participate in the job application process, interview, or onboarding, please use this Form to request an accommodation.

What You'll Be Doing:

• Assess security posture and identify risks within Okta's core SaaS productivity and collaboration applications (e.g., M365, Google Workspace, Slack, Salesforce, Atlassian Suite).
• Configure, manage, and optimize SaaS Security Posture Management (SSPM) tooling to proactively detect misconfigurations, excessive permissions, risky third-party integrations, and compliance deviations.
• Implement, operate, and tune Secrets Scanning and CASB solutions within collaboration platforms, code repositories integrated with SaaS applications, and other relevant environments; coordinate the remediation of exposed secrets.
• Define technical and security requirements for the secure configuration, integration, and lifecycle management of new and existing SaaS applications.
• Translate complex security needs and findings into actionable technical specifications, remediation guidance, and project milestones for application teams.
• Drive remediation efforts based on SSPM, secrets scanning, and other assessment findings by partnering effectively with application owners, IT teams, and business stakeholders.
• Act as a key resource during security incident response activities involving SaaS applications, assisting with investigation and containment.
• Identify opportunities for automation within SaaS security monitoring, alerting, and response workflows.
• Educate application teams and end-users on SaaS security best practices and relevant policies.
• Create and maintain runbooks, standard operating procedures, and documentation for SaaS security configurations and processes.

What You'll Bring to the Role:

• 3-5 years of experience in a security analyst role with a strong, demonstrable focus on SaaS application security.
• Hands-on experience configuring, managing, or utilizing SSPM (SaaS Security Posture Management) tools (e.g., AdaptiveShield, or similar capabilities within CASB/SSE platforms).
• Experience implementing, managing, or responding to findings from Secrets Scanning tools/techniques within relevant contexts (e.g., Slack, Jira, GitHub/GitLab, configuration files).
• Deep understanding of security configurations, common risks, and mitigation techniques for major enterprise SaaS platforms (e.g., M365, Google Workspace, Slack, Salesforce, HRIS systems, etc.).
• Strong understanding of core security fundamentals, identity management concepts (IAM/SSO), and security frameworks (e.g., NIST, ISO 27001, CIS Benchmarks).
• Proven ability to create meaningful metrics and dashboards using business intelligence or security reporting tools.
• Excellent communication skills, with the ability to clearly convey complex SaaS security concepts and risks to both technical and non-technical audiences.
• Demonstrated ability to translate security requirements and findings into actionable plans and drive remediation efforts through collaboration.

#LI-MK1

#LI-hybrid