Rokt
Senior Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Rokt
Rokt is a global leader in ecommerce technology, founded in 2012 in Sydney, Australia. The company specializes in AI-driven personalization technology that enhances the transaction moment for retailers and brands. Its core product is a checkout optimization software development kit (SDK) that integrates into ecommerce checkout flows, helping retailers maximize relevance, increase revenue, and acquire new customers. Rokt's platform includes Rokt Ecommerce, which optimizes the checkout experience, and Rokt Ads, which allows brands to connect with customers across a network of approximately 3,000 ecommerce partners. The company has experienced significant growth, achieving unicorn status in 2021 and generating $600 million in revenue in 2024. Rokt serves a diverse clientele, including major companies like Uber, Ticketmaster, and PayPal, and continues to innovate by expanding its AI capabilities and entering new ecommerce verticals.
Security at Rokt
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Rokt maintains a world-class information security and privacy program, emphasizing secure software development life cycle (SSDLC) and a public vulnerability disclosure program.
- They prioritize keeping client information secure and data private, utilizing secure messaging APIs and CSP configurations for applications.
Security Team
- Prashanth Mekala serves as Rokt's Chief Security Officer (CSO), a role responsible for security at an executive level.
- Public job postings for Senior Security Engineers indicate a focus on AI-driven security tooling and SAST/SCA/DAST workflows within the team.
Key Initiatives
- Rokt's initiatives include maintaining an Information Security Management System (ISMS) with ISO/SOC certifications, establishing a Secure Software Development Life Cycle (SSDLC), and implementing automated code analysis and daily vulnerability scanning.
- They also conduct external assessments quarterly/annually, run a public vulnerability disclosure program, and provide secure coding training for engineers.
- Future initiatives include developing AI-driven security assessment tools and modernizing SAST, SCA, and DAST workflows.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.