Asks for

The ad says“Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.”
The ad says“Agile Development: Deep experience working successfully with engineering teams in an Agile development environment, including scoping, sprint planning, and backlog management and prioritization.”
The ad says“AI Agent Experience: Significant product experience with AI Agent creation, orchestration and the use of MCP (Model Context Protocol) servers for exposing context, tools, and resources to agents. Ability to use this experience to define how Auth0's should securely authenticate, authorize, and monitor non-human AI principals at runtime.”
The ad says“General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).”
The ad says“AI Agent Experience: Significant product experience with AI Agent creation, orchestration and the use of MCP (Model Context Protocol) servers for exposing context, tools, and resources to agents. Ability to use this experience to define how Auth0's should securely authenticate, authorize, and monitor non-human AI principals at runtime.”
The ad says“General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).”
The ad says“General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).”
The ad says“General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).”
The ad says“Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.”
The ad says“Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.”
The ad says“General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).”
The ad says“Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.”
The ad says“General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).”

Secure Every Identity, from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

About the Role

We are seeking a Senior Product Manager to drive the vision, strategy, and execution for a key product area within the Auth0 Identity Security product line, with a focused mandate on the rapidly evolving domain of Agentic Security. This role sits at the intersection of product strategy, cross-functional leadership, and agile execution — requiring someone who can both shape long-term direction and deliver with precision.

We are the team that builds solutions that protect our customer’s Auth0 environments. Our group delivers features such as attack protection, bot detection, adaptive MFA, identity security for AI Agents and related analytics / insights on the effectiveness of our solutions in thwarting attacks from bad actors.

The ideal candidate brings direct, hands-on experience in agentic security product management, with a deep understanding of how AI agents are built, orchestrated, and secured. This includes practical knowledge of agentic workflows, MCP servers, agentic tooling, and their use through productivity applications such as Claude Code.

A core focus of this role is runtime security & AI agent classification: building real-time detection, behavioral analysis, and protection capabilities for agentic systems. The successful candidate will have command of the OWASP Top 10 for Agentic AI attack vectors and mitigations, and will bring experience in identifying and responding to threats such as prompt injection, agent intent anomalies, and rogue agent detection — including scenarios where an agent may have been compromised or infiltrated.

Beyond agentic-native threats, this role demands strong fluency in fraud and risk mitigation, spanning both traditional and emerging attack surfaces. This includes a depth of knowledge across classic vectors — Account Takeover (ATO), resource draining, and fraudulent account creation — as well as their evolving equivalents in multi-agent and autonomous system environments.

Key Responsibilities

Product Strategy & Roadmap: Define and champion a clear product strategy and roadmap, utilizing data-driven prioritization methods to maximize customer value and business impact. Manage inputs from diverse cross-functional stakeholders.
Customer Experience: Drive customer research (surveys, interviews, data analysis) to identify top opportunities, optimize the end-to-end customer journey, and ensure product value realization.
Experience Design: Partner with Product Design on prototypes, wireframes, and concepts, continuously improving the usability of both the UI and APIs for technical and business audiences.
Agile Execution & Delivery: Maintain active, daily collaboration with engineering teams. Write clear user stories, scope work for sprints, and actively participate in Agile cadences. Proactively solve problems and manage ambiguity to ensure on-time delivery.
Performance Optimization: Drive continuous data analysis and insights into customer adoption. Establish clear hypotheses and baselines for feature launches, then track progress toward strategic targets and drive continuous product iteration based on learnings.
Commercial Growth & Value: Partner closely with Product Marketing to run targeted customer campaigns. These efforts will drive trial conversions, accelerate Product-Led Growth (PLG) motions, boost retention, and increase high-value usage and adoption.
Go-to-Market: Proactively monitor the competitive landscape to identify gaps and differentiators. Partner with Product Marketing and pre-sales engineering to refine product positioning, develop engaging customer value messaging, and craft supporting content (blogs, webinars).
Field & Customer Engagement: Actively engage with the field organization (Sales, Solutions Engineering, Technical Account Managers) to build deep knowledge of the voice of the customer. Drive customer conversations during pre-sales, renewals, and at key events to gather feedback and support adoption.
AI-Powered Productivity: Drive efficiency and strategic insight by leveraging AI tools for high-value activities, including prototyping, synthesizing customer insights, accelerating competitive and market analysis, and rapidly generating high-quality product documentation.

Required Qualifications

AI Agent Experience: Significant product experience with AI Agent creation, orchestration and the use of MCP (Model Context Protocol) servers for exposing context, tools, and resources to agents. Ability to use this experience to define how Auth0's should securely authenticate, authorize, and monitor non-human AI principals at runtime.
Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.
Product Management Experience: 5-8 years of experience in Product Management, whether from startup or high-growth company environments.
Education: An Undergraduate and/or Masters Degree in Computer Science, Engineering, Information Systems or a related technical field.
General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2).
Communication: Excellent communication skills (presentation, verbal, and written) and a highly collaborative approach, working with cross-functional stakeholders across the organization.
Enterprise Software: Demonstrated experience in delivery of global, enterprise software across all aspects of the product lifecycle.
Results Driven: A clear history of being outcome-driven and achieving tangible business results through the successful delivery of products, features, or capabilities that you have owned.
Problem Solving: Keen analytical, problem-solving, and decision-making abilities, with a proven capacity to formulate effective action plans even when faced with incomplete, conflicting, or ambiguous inputs.
Entrepreneurial: Bring an entrepreneurial mindset and a strong intellectual curiosity that drives you to learn and delve deeply into both business and technical aspects of this role.
Agile Development: Deep experience working successfully with engineering teams in an Agile development environment, including scoping, sprint planning, and backlog management and prioritization.

#LIHybrid

#P-1164.1

Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.

The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between:

$169,000—$253,000 USD

The Okta Experience

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.