Enterprise Security Engineer, Vulnerability Management

Details

Enterprise Security protects the systems, identities, devices, and services that enable OpenAI's employees to work securely and effectively. The team partners across IT and Security to understand risk, build practical defenses, and support a rapidly evolving technical environment.

The role focuses on vulnerability management, novel vulnerabilities, and zero-day response. The engineer will investigate vulnerabilities and security weaknesses across networks, endpoints, and SaaS, prioritize them in the context of real exposure, and drive remediation through verified outcomes. The role also involves building security capabilities and automation, using AI agents to solve practical problems, and helping shape enterprise security as agents become a larger part of everyday work.

This role is open to candidates in San Francisco, California, and to remote candidates in the United States.

Responsibilities

• Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook.
• Translate technical findings into clear attack paths, business impact, and actionable remediation.
• Develop and validate emergency mitigations when patches are unavailable.
• Coordinate with system owners, vendors, and incident responders, and drive durable fixes through verified closure.
• Improve asset visibility, ownership, vulnerability data quality, and reporting.
• Build and operate security tools and integrations using code, APIs, automation, and AI agents.
• Design controls for agent access, execution, and accountability.
• Contribute across endpoint, network, identity, and SaaS security.
• Support incident investigations when needed.

Requirements

• Independent experience investigating novel or emerging vulnerabilities and driving enterprise remediation from uncertain initial reports through mitigation and verified closure.
• Technical depth in a relevant security domain and working knowledge across networks, endpoints, and SaaS.
• Ability to understand and improve code and safely integrate APIs and security systems.
• Experience solving substantive problems using AI agents, including evaluating and correcting their work.
• Ability to think clearly about security tradeoffs, ambiguous evidence, and the changing risks of agentic systems.
• Strong collaboration, ownership, and communication skills, including the ability to communicate technical risk to varied audiences.

Benefits

• Equity, performance-related bonuses for eligible employees, and comprehensive benefits.
• Medical, dental, and vision insurance, with employer contributions to Health Savings Accounts.
• Pre-tax accounts for health and dependent care expenses, as well as commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental, medical, and caregiver leave.
• Paid time off, company holidays, and paid office closures.
• Mental health and wellness support.
• Employer-paid basic life and disability coverage.
• Annual learning and development stipend.
• Daily office meals and eligible meal delivery credits.
• Relocation support for eligible employees.
• Additional benefits may include charitable donation matching and wellness stipends.