This role pays less than
71%
of similar roles. Most pay
$151,987–$214,100
— the shaded band above.
At the midpoint, this role pays about
$159k
versus about
$183k
for comparable roles.
Based on 240 similar postings.
Employer
About Okta Inc
Okta, Inc. is an American identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, websites, web services, and devices.[
Okta Inc currently has
137 open roles
on FindRole.
Listed pay typically runs
$174,000–$239,000
across 137 roles with salary data.
The Staff Security Engineer, TDI joins the Technology, Data, and Intelligence team to strengthen security posture across infrastructure, cloud, and business systems. This role involves building a centralized Security Posture Analytics and Reporting capability to aggregate findings, automate issue tracking, and manage risk data. You will develop agentic-first scalable security controls, automate scanning and remediation workflows, and implement secrets rotation automation. The position requires expertise in Snyk, Semgrep, Qualys, and Cyera tools, alongside proficiency in AWS, SRE principles, and securing enterprise applications like Salesforce, Google Workspace, Slack, and Zoom. You will also lead shift-left initiatives, conduct security architecture reviews, and develop AI-driven systems to automate triage and prioritization. The work focuses on solving complex security challenges within the internal corporate environment to ensure all platforms are secure by design against a dynamic threat landscape.
What does a Security Engineer earn in California?
Median $196000 from 31 postings across 16 companies.
Build a centralized Security Posture Analytics and Reporting capability to aggregate risk data across security tools.
Automate issue tracking, ownership assignment, and remediation workflows for identified security vulnerabilities.
Configure and operationalize scanning tools such as Snyk, Semgrep, and Qualys across all TDI assets.
Develop agentic automation and AI-driven systems to scale security posture management and triage.
Partner with engineering teams to implement secure coding practices and "shift left" security in the SDLC.
Implement automated secrets rotation and best practices for secret management across internal systems.
Conduct Security Architecture Reviews (SARs) and manage update pipelines to ensure infrastructure compliance.
Develop dashboards and metrics to provide executive visibility on risk reduction and remediation progress.
What we're looking for
10+ years of experience in Security Engineering, DevSecOps, Infrastructure Security, or SaaS applications within a SaaS or enterprise environment.
Hands-on technical expertise in scanning, patching, and remediating issues across cloud and SaaS ecosystems.
Experience deploying and managing Snyk, Semgrep, and Qualys tools.
Strong knowledge of AWS security practices, SRE principles, and securing business technology stacks like Salesforce, ERP, Google Workspace, Slack, and Zoom.
Practical understanding of secure SDLC/PDLC, supply chain security, and secrets management.
Experience building automated security tools and applications.
Proficiency with visualization and BI tools to create dashboards and provide reporting to leadership.
Proven ability to coach and mentor development teams to improve remediation velocity.
Terraform
Infrastructure-as-Code
GitOps
Python
Go
Bash
PowerShell
Jamf Pro
FleetDM
Okta
Google Workspace
LDAP
macOS
iOS
Windows
Linux
Git
Security Operations