Oak - Identity Security OS

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: We're looking for an experienced Backend Engineer to join a highly skilled R&D team of exceptional peers. You are a builder at heart - someone who deeply understands distributed systems and takes pride in shipping efficient, resilient code. We need an engineer who instinctively drives projects forward, stepping in smoothly whether it’s designing greenfield architecture or tackling complex engineering problem. If you are passionate about your craft, naturally curious about modern engineering paradigms, and prioritize collective success, we want you on our team. What You'll Do • Drive the end-to-end development of critical backend components - from research and system design to deployment, observability, and long-term maintenance. • Serve as a trusted voice in technological and architectural decisions, balancing rapid execution with pragmatic, scalable system design. • Architect and facilitate full agentic workflows, integrating AI capabilities directly into our core platform. • Act as an autonomous executor who seamlessly collaborates with the broader team, elevating engineering standards and delivering top-tier value to our customers. What You'll Bring • 8+ years of backend engineering in high-level programming languages (e.g., Go, Python), with a proven track record of solving hard technical problems. • A low-ego, high-impact approach: You are self-directed, driven by delivery, and willing to roll up your sleeves for the foundational work that ensures system stability. • Deep architectural pragmatism: Extensive experience with microservices, databases, and asynchronous systems, coupled with a nuanced understanding of exactly when and how to deploy them. • Forward-thinking adaptability: A continuous desire to explore new technologies, leveraging modern development tools and AI paradigms to accelerate your workflows and multiply your impact. • Bachelor of Science in Computer Science, Software Engineering, or equivalent battle-tested experience.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: We’re looking for an experienced Senior DevOps Engineer to join a highly skilled R&D team of exceptional peers. You are a builder at heart - someone who deeply understands how a well-oiled engineering organization operates, from seamless CI/CD pipelines and complex networking to infrastructure, databases, and delivering a stable, robust product to customers. We need an engineer who instinctively bridges the gap between customer requirements and peer developer needs, stepping in smoothly to tackle complex engineering issues with elegant, production-grade solutions. If you are passionate about your craft, naturally curious about modern infrastructure paradigms, and prioritize collective success, we want you on our team. What You'll Do: • Lead end-to-end infrastructure solutions from initial discovery of customer and developer needs to delivering robust, scalable systems in a fast-paced environment. • Serve as a trusted voice in technological and architectural decisions, balancing rapid execution with pragmatic, highly resilient infrastructure design. • Own and optimize our core platform foundations, ensuring seamless automation, advanced container orchestration, and rock-solid environment stability. • Act as an autonomous executor who drives major infrastructure features from conception to deployment, collaborating closely with the broader team to elevate engineering standards. What You'll Bring: • 6+ years of DevOps and infrastructure engineering experience, with a proven track record of solving complex system and scale challenges. • A low-ego, high-impact approach: You are self-directed, driven by delivery, and willing to roll up your sleeves for the foundational work that ensures system stability and developer velocity. • Deep infrastructure pragmatism: Extensive experience across the entire stack - including Kubernetes, advanced CI/CD, modern networking, security best practices, and database orchestration - coupled with a nuanced understanding of how to scale systems efficiently. • Forward-thinking adaptability: A continuous desire to explore new technologies, leveraging modern cloud-native tools and infrastructure paradigms to accelerate development workflows and multiply your impact. • Bachelor of Science in Computer Science, Software Engineering, or equivalent battle-tested experience.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Research is where deep security expertise becomes product. We translate how identity is weaponized and becomes an attack path - across human, machine, and AI agent identities - into the risk models and security content that exposes real identity risk inside customer environments. Research here doesn't end in a slide deck, it ships. As a Security Researcher, you'll own and evolve the core of the Oak platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it. Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it — defining how Oak discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk. You'll also shape Oak's voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves. What you will Do: • Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers. • Translate deep expertise in identity and security into the analytical engine that drives how Oak reasons about risk, governance, and access decisions across organizations. • Create and own Oak knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform. • Pioneer Oak's approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world • Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers. What you will bring: • 5+ years of hands-on security research experience, with a track record that demonstrates depth across identity, access control, or adjacent threat domains. • Low ego, high impact - you share findings freely, measure success by the team's impact and you are value-driven, Willing to roll up your sleeves for the foundational work creating knowledge and insights in order to provide real value to real customers. • Innovative and forward thinking - Continuous desire to learn, explore and create. • The instinct to find what others miss: you approach identity attack surfaces, NHI exposure, and AI agent behavior with genuine curiosity and a willingness to go where the research leads. • A collaborative default - happy to share and work alongside product, engineering, and go-to-market teams in order to translate raw research into intelligence that sharpens Oak's platform and customers' understanding of their identity risk. Nice to have: • A history of original, published work - conference presentations (Black Hat, DEFCON, or equivalent), blog series, or white papers that has moved the needle and made impact.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: We are looking for a high-ownership Product Manager to take full end-to-end responsibility for a core domain within Oak's platform. Reporting to a Director of Product, you will bridge the gap between customer discovery and technical R&D execution to ship market-ready, AI-native identity solutions at speed. What you will Do: • Own a product domain end-to-end within Oak's platform, driving it from zero to a shipped, market-ready capability. • Lead structured discovery: conduct customer interviews, engage with industry analysts and IAM/IGA consultants, and synthesize findings into sharp problem definitions and opportunity sizing. • Map the competitive landscape across identity governance, NHI management, and adjacent security tooling to identify differentiated positioning for your domain. • Translate discovery into a clear product strategy and roadmap, making deliberate prioritization decisions backed by evidence from the market and Oak's identity graph data. • Partner closely with R&D throughout the full build cycle - from shaping requirements and reviewing designs to driving execution and managing trade-offs under real delivery constraints. • Work hand-in-hand with GTM teams to define go-to-market strategy, equip sales and marketing with the right positioning, and ensure a tight feedback loop from the field back into the roadmap. What you will bring: • 8+ years of product management experience in cybersecurity, with a track record of shipping features that address real security or compliance challenges. • Proven, hands-on experience in the identity space – IAM, IGA, PAM, or related domains – with a demonstrated track record of shipping identity-focused capabilities. • Technically fluent enough to work shoulder-to-shoulder with R&D – able to translate complex identity, access, or security concepts into clear product requirements without losing fidelity. • Strong business acumen and strategic thinking: you connect product decisions to market opportunity, customer pain, and revenue impact, not just feature output. • Comfortable owning the full product lifecycle independently from discovery through delivery. • Confident, polished communicator in English who can lead customer-facing meetings, run discovery sessions, and present roadmaps to technical and executive audiences alike. • Able to hold ambiguity and make principled trade-offs in a fast-moving environment where IAM, IGA, and NHI security demands are evolving rapidly. Nice to have: • Hands-on experience with JIT access or Non-Human Identities (NHIs) specifically. • Background in a technical customer-facing role (e.g., Solutions Architecture or Cyber Consulting).

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Vulnerability Research is the sharpest edge of our technical work - the team that takes systems apart to learn how they truly work, and where they break. We go deep into the mechanisms, protocols, and architectures that modern technology is built on, and we pressure-test the assumptions the rest of the industry takes for granted. Sometimes that work sharpens the platform, sometimes it stands entirely on its own, as an original research novelty. As a Vulnerability Researcher, you'll build first-principles understanding of the technologies and systems you investigate, then go looking for what's wrong with them: the flawed assumptions baked into established paradigms, the gap between how a system is meant to behave and how it actually behaves, and the novel vulnerabilities and exploitation techniques no one has named yet. This is hands-on, deep technical work - reverse-engineering, breaking, and finding what's exploitable before an attacker does. You'll have the room to follow the research where it leads, and the backing of an ecosystem created to set you up for success by providing every tool and access that could help. Some threads will feed directly into how Oak understands what's genuinely exploitable, grounding the platform in real attacker reality rather than theoretical risk. Others will be pure discovery, pursued because the problem is hard and the finding truly matters, and published to move the field forward. Either way, your work establishes Oak's authority in the field. Through original research, disclosures, and technical thought leadership, you'll build a body of work that earns the respect of the security community and sharpens how the industry thinks about what's truly secure. What you will Do: • Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names. • Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended. • Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do. • Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook. • Ground Oak's understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in. • Promote Oak's standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits. What you will bring: • 6+ years of hands-on vulnerability research, reverse engineering, or offensive security, with a proven track record of finding non-trivial flaws and the depth in systems, protocols, and architectures to understand precisely why they exist. • A first-principles approach to how things actually work, not how they're documented to work: you pull the thread until you hit ground truth, and you're not satisfied until you do. • The instinct and ability to see what others overlook - the unquestioned assumptions in established systems, the edges no one has tested, the failure modes that live in the gap between spec and implementation. • End-to-end ownership of research: you drive hypotheses to conclusions through dead ends, changes of directions and reach hard proofs • Strong hands-on expertise, converting theories and research into a working chain and proof of concept. • Result driven depth: you go as far as a problem deserves, because the result is worth it, and you know when it is. • A track record of original significant discoveries - published CVEs, novel vulnerability classes or exploitation techniques, research that named a problem the field didn't have words for yet. Nice to have: • History of presenting original research at Black Hat, DEFCON, OffensiveCon, Hexacon or a comparable security conference. • Significant CVEs (CVSS High or Critical) under your name.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Identity security is being redrawn by AI. Agents now execute through human and machine identities, inheriting entitlements that legacy IGA was never designed to govern, review, or revoke at machine speed. We are looking for a Product Marketing Manager to own how Oak's story lands in that market — the category narrative, the messaging, the launches, and the assets the field runs on. You will be Oak's second marketing hire, working directly with the Director of Product Growth & Marketing, the CEO, and the CPO, with real ownership from day one. This is a hands-on operator role at seed stage: you will write the words, build the decks, and sit in the customer calls that sharpen them. What you will Do: • Own positioning and messaging for the Oak platform — category narrative, pillar-level messaging, ICP-specific value props, and competitive differentiation across IGA, IAM, and the emerging NHI and AI agent security landscape. • Lead product and feature launches end-to-end: narrative, naming, enablement, web, press, and the launch moment itself. • Translate deep technical capability — the identity graph, connector coverage, access reviews, JIT, lifecycle automation — into stories that land with CISOs, IAM leaders, and identity architects alike. • Build the sales enablement layer from the ground up: pitch decks, demo narratives, battle cards, one-pagers, discovery guides, and customer proof points. • Be the voice of the customer inside Oak — run win/loss, customer and prospect interviews, and message testing, then feed what you learn back into positioning and roadmap conversations. • Track the competitive landscape and turn it into a sharp, defensible story the field can carry into every deal. • Partner with demand gen, content, design, and field marketing to keep the story consistent across web, campaigns, events, and pipeline programs. What you will bring: • 5+ years of product marketing experience in cybersecurity or an adjacent enterprise security market. • Proven ability to turn complex technical capability into clear, differentiated, customer-facing messaging for technical buyers. • Strong writing skills: you can produce a launch narrative, a positioning doc, or a sales one-pager that ships without a rewrite. • Experience building sales enablement that reps actually use, and a track record of working shoulder-to-shoulder with a field team. • Curiosity about identity and AI, and the appetite to go deep on a technical domain fast. • Comfort with ambiguity, speed, and a blank page — you operate like a founder, not a coordinator. Nice to have: • Direct exposure to identity security — IGA, IAM, PAM, or NHI — and modern identity architectures. • Experience at an early-stage or hyper-growth startup, ideally as an early marketing hire. • Experience creating a new category or opening a new segment through a platform shift. • Familiarity with the agentic / AI-native product wave and its security implications. • Bachelor's degree in Marketing, Business, Computer Science, or a related field.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. At Oak, agents are core to what we build - We're looking for an AI Engineer to design and own the agentic infrastructure that spans the entire company What You'll Do • Architect and ship agentic capabilities as production-grade product features - owning the full tradeoff space across reliability, observability, security, latency, deterministic behavior and cost. • Design and build AI agents that operate across Oak's identity graph, automating complex identity related workflows. • Evaluate and integrate emerging LLMs, agent frameworks, and agent infrastructure, making principled build-vs-integrate decisions grounded in production requirements. • Partner with R&D and product leadership to identify where agentic automation delivers the highest leverage across the product. What You'll Bring • 8+ years of backend engineering in high-level programming languages (e.g., Go, Python), with a proven track record of solving hard technical problems. • Hands-on experience building and shipping production LLM agent systems with frameworks like LangGraph, Strands Agents, or ADK, and with model gateways/routing layers. • A low-ego, high-impact approach: You are self-directed, driven by delivery, and willing to roll up your sleeves for the foundational work that ensures system stability. • Deep architectural pragmatism: Extensive experience with microservices, databases, and asynchronous systems, coupled with a nuanced understanding of exactly when and how to deploy them. • Forward-thinking adaptability: A continuous desire to explore new technologies, leveraging modern development tools and AI paradigms to accelerate your workflows and multiply your impact. • Bachelor of Science in Computer Science, Software Engineering, or equivalent battle-tested experience.