Auth0 Senior Security Engineer, Detection & Response

Website Auth0

Help us make the internet safer.

We are a Security company and Auth0’s Security team is in the privileged position of supporting a Security-first culture for a company that wants to make the internet safer.

Do you enjoy working on a blue team with a group of highly motivated and skilled engineers all huddled together in a video call hunting for evidence of exploitation in logs, comparing your findings with the group, and bouncing ideas off of each other?  Perhaps you enjoy working with others to build and deploy complex security systems on quarter long projects where you will face various challenges and get to play with the latest security technology?

If so, then then you’ve found the right career at the right company.  Two of our key values at Auth0 are:  N+1>N and One Team One Score.  Whether you are a junior or a 10 year veteran to security engineering, you will have numerous opportunities to learn and grow as an engineer on our team as we are a highly collaborative group.

We are looking for a technical and hands-on Incident Response Engineer who is passionate about protecting Auth0’s customers, employees and brand. The successful candidate will have a mix of deep technical knowledge, and a demonstrated background in information security.

In this role you will:
Respond to and act as incident commander for security incidents. Proactively consider how to prevent the same type of incidents from occurring in the future.
Use your experience and security intuition to hunt for threats across enterprise and production environments. If we’re missing important data we need, go get it!
Act as an escalation point for automated alerts.
Perform variant analysis and root cause analysis to find systematic bugs.
Develop creative solutions to complex security problems which balance business needs and risk.
Maintain current knowledge and skills to keep up with the rapidly changing threat landscape.
Perform regular on-call responsibilities, including fulfilling various incident response team roles.
Work together with other security engineers and stakeholders to architect and deploy enterprise security solutions.

Our ideal candidate will:
Have 3-5 years working in a high-demand security team.
Have a Bachelor’s/Master’s in Computer Science or equivalent.
Have excellent English language skills, both written and verbal.
Have strong demonstrable knowledge of common attack vectors.
Have familiarity/experience with AWS & Azure services and security concepts.
Have experience with common Linux / Mac OS command line, security monitoring, log analysis and forensic tools.
Have experience scripting or developing with Python or other language
Have ability to work with a high degree of autonomy.
Have experience working an on-call rotation.
Have familiarity/experience with osquery.
Have a passion to learn and thrive in a dynamic and constantly changing environment.
Have excellent analytical thinking, time management and coordination skills.

Bonus Points for:
Experience working as a senior part of a Computer Security Incident Response Team (CSIRT) or Security Operations Team.

Examples of our Engineering culture:

Okta is rethinking the traditional work environment, providing our employees with the flexibility to be their most creative and successful versions of themselves, no matter where they are located. We enable a flexible approach to work, meaning for roles where it makes sense, you can work from the office, or from home, regardless of where you live. Okta invests in the best technologies and provides flexible benefits and collaborative work environments/experiences, empowering employees to work productively in a setting that best and uniquely suits their needs. Find your place at Okta

*Auth0 is under the umbrella of Okta*

To apply for this job please visit