The Defensive Cyber Operations (DCO) team is seeking an experienced cyber threat intelligence leader to enable Okta’s detection and response programs responsible for defending the Okta platform, infrastructure and corporate environment.

The Role

You will operate as part of the DCO leadership team, taking ownership of building and maintaining the cyber threat intelligence capability to enable Okta’s intel-driven approach to defensive cyber operations. Core responsibilities include:

• Build and maintain a list of priority intelligence requirements (PIR)
• Determine and address needs for tools and data that will enable intelligence outputs
• Collect, analyze and disseminate intelligence based on those PIRs
• Provide intelligence support in response to ongoing incidents or events of interest
• Identify and report the most important metrics to measure success of the intelligence program
• Mentor and coach employees, providing advice for performance improvements and career guidance.
• Maintain relationships with community/industry threat sharing groups in order to both aid our peers and leverage support when required

What does it take?

You’re a team player. You have great communications skills and a thirst for knowledge. You’re curious about systems and how they interact, knowing that to properly defend a system you must first understand how it works. You enjoy pulling on threads to exploit the weaknesses of an adversary and uncover detailed information that enables the enhancement of defensive capabilities. You’re calm under pressure and have a good internal compass for taking calculated risks.

If you don’t have a degree, you have equivalent experience that’s given you the foundational knowledge to understand complex computing environments.

You’re a leader. People want to work with you. You know what it takes to build a world-class defensive cyber capability and you’re passionate about helping makes ours stronger. Your experience probably includes:

• Leading, or contributing to, technology focused teams large or small.
• Mentoring staff and providing development opportunities to build high performing teams.
• Identifying and prioritizing organizational risks, crown jewels and the critical terrain that must be controlled in order to effectively defend against cyber adversaries.
• Researching the goals, strategy, tactics, techniques and procedures (TTPs) and tools used by sophisticated adversaries and providing detailed analyses to a technical audience of both defensive and offensive security engineers.

Ideally you also have experience in several of the following areas:

• Operating as, or providing support to, the incident commander or technical lead during cyber security incidents.
• Developing advanced detection capabilities and automating the triage and response to the alerts they generate.
• Responding to cyber security incidents whether as a consultant or internally for your organization.
• Analyzing critical systems to understand both how to break them and defend them against attack.
• Working collaboratively within product and/or enterprise project teams, assisting to deliver large and complex technology solutions.