Enterprise Security Engineer

at OpenAI
USD 260,000-325,000 per year
MIDDLE
✅ Remote ✅ On-site

SCRAPED

Used Tools & Technologies

Not specified

Required Skills & Competences ?

Security @ 3 Python @ 5 GitHub @ 3 AWS @ 3 Azure @ 3 Bash @ 5 OAuth @ 3 macOS @ 3

Details

About the Team

Within the OpenAI Security organization, the IT team provides tools and services so researchers, engineers, and staff can work comfortably, securely, and with minimal interruptions. The IT team is small and nimble; you'll have opportunities to build broadly and deliver a world-class enterprise security program.

Responsibilities

  • Implement and manage security for OpenAI's internal information systems, infrastructure, and processes.
  • Develop and enforce IT and security policies and procedures.
  • Monitor internal and external systems for security threats and respond to alerts.
  • Harden infrastructure and SaaS tooling using best practices in Azure AD, Google Workspace (GSuite), GitHub, and other SaaS platforms.
  • Advise employees on endpoint security, office AV, and network infrastructure best practices.
  • Design sharing controls and monitoring (including intelligent group management, Data Loss Prevention (DLP), and other controls) to protect company data.
  • Apply principles such as “secure by default” and “zero trust” to create secure environments for knowledge workers and developers.
  • Identify and remediate vulnerabilities in internal systems following data security best practices.
  • Use AI-driven models to build systems for improved security detection and response, data classification, and related tasks.
  • Contribute to endpoint and cloud security roadmaps by tracking threats and recommending improvements.
  • Educate employees on data security and advise on maintaining a secure environment.

Requirements

  • Experience protecting and managing macOS fleets.
  • Experience deploying and managing endpoint security solutions (management frameworks, EDR tools).
  • Experience with public cloud providers (e.g., Amazon AWS, Microsoft Azure).
  • Experience with identity and access management frameworks and protocols, including SAML, OAuth, and SCIM.
  • Experience with e-mail security protocols and controls (SPF, DKIM, DMARC).
  • Intermediate or advanced proficiency with a scripting language (e.g., Python, Bash, or similar).
  • Knowledge of modern adversary tactics, techniques, and procedures.
  • Ability to collaborate empathetically, independently run projects, and prioritize risk reduction work.

Benefits

  • Base pay in the listed range plus equity and potential performance-related bonus (total comp varies by location and experience).
  • Medical, dental, and vision insurance with employer HSA contributions.
  • Pre-tax accounts (Health FSA, Dependent Care FSA, commuter accounts).
  • 401(k) with employer match.
  • Generous paid parental, medical, and caregiver leave.
  • Flexible PTO and paid holidays/office closures; sick and safe time.
  • Mental health and wellness support; employer-paid basic life and disability coverage.
  • Annual learning & development stipend; relocation support for eligible employees.
  • Daily meals in offices and meal delivery credits as eligible; additional fringe benefits (charitable matching, wellness stipends).

Additional notes:

  • This role is open to remote employees in the U.S.; relocation assistance is available to San Francisco.
  • Background checks will be administered in accordance with applicable law. OpenAI is an equal opportunity employer and provides reasonable accommodations for applicants with disabilities.