Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
AI @ 3
Agentic Systems
Automated Testing
Communication @ 3
Security @ 3
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
The Intelligence and Investigations team helps ensure the safe, responsible deployment of AI by detecting and mitigating abuse. This role focuses on evaluating cyber capabilities in AI models and determining whether safeguards remain effective against increasingly sophisticated attacks. The position combines scaled evaluation with expert-driven cybersecurity testing and includes testing abuse risks in agentic systems.
The role is based in San Francisco, California, or Seattle, Washington, with a hybrid work model requiring three days in the office per week.
Responsibilities
- Design and run rigorous evaluations of model cyber capabilities and safeguards, including policy adherence, correct refusal, over-refusal, resilience to jailbreaking, and other adversarial techniques.
- Conduct hands-on testing to understand what models can enable for experienced security practitioners using task-specific harnesses, scaffolding, and multi-step workflows.
- Distinguish benchmark or policy failures from behavior that creates meaningful real-world risk by considering feasibility, attacker uplift, reliability, and capabilities already available elsewhere.
- Build and improve automated testing infrastructure for repeatable measurement, rapid iteration, and statistically grounded analysis across models and product surfaces.
- Test abuse risks in agentic systems, including indirect prompt injection, agent hijacking, and other adversarial manipulation of systems that use tools or external information.
- Translate findings into risk assessments and actionable recommendations for Security, Research, Product, Policy, and Engineering teams.
- Contribute to Safety Bug Bounty work, particularly reports requiring cybersecurity expertise.
Requirements
- Substantial experience in at least one of the following areas:
- Cybersecurity, including application security, penetration testing, vulnerability research, adversary simulation, or red-team operations.
- AI model evaluation, including designing and running evaluations, building agentic harnesses, automating adversarial testing, constructing datasets, or analyzing model behavior at scale.
- Working knowledge of both cybersecurity and model evaluation, with interest in developing additional depth outside the primary area.
- Ability to write code and build practical testing tools for automating experiments, orchestrating models, or analyzing results.
- An attacker mindset and interest in discovering failure modes that standard evaluations may not capture.
- Clear written and verbal communication skills, including the ability to explain technical findings, limitations, and risks to audiences with different backgrounds.
- Experience working across technical and non-technical teams to move from findings to decisions, mitigations, or follow-up tests.
Benefits
- Equity, performance-related bonuses for eligible employees, and comprehensive benefits.
- Medical, dental, and vision insurance, with employer contributions to Health Savings Accounts.
- Pre-tax flexible spending and commuter accounts.
- 401(k) retirement plan with employer match.
- Paid parental, medical, caregiver, and sick or safe leave.
- Paid time off and company holidays.
- Mental health and wellness support.
- Employer-paid basic life and disability coverage.
- Annual learning and development stipend.
- Office meals and eligible meal delivery credits.
- Relocation support for eligible employees.
- Additional benefits may include charitable donation matching and wellness stipends.
More jobs at OpenAI
Principal Software Engineer, Full Stack — Codex
OpenAI · San Francisco, United States
USD 459,000-536,000 per year
Service Designer, Support
OpenAI · San Francisco, United States
USD 216,000-310,000 per year
Research Scientist / Research Engineer, Search - Knowledge Graphs
OpenAI · San Francisco, United States
USD 380,000-850,000 per year
Research Scientist / Research Engineer, Search Integrity
OpenAI · San Francisco, United States
USD 380,000-850,000 per year
Applied Scientist, Product Policy
OpenAI · San Francisco, United States
USD 207,000-230,000 per year
Similar jobs
Senior/Staff Network Engineer, AI/HPC
Groq · New York City, United States, San Francisco, United States, Dallas, United States
USD 270,400-401,600 per year
Staff+ Application Security Engineer - M&A
Anthropic · San Francisco, United States, New York City, United States, Seattle, United States
USD 320,000-485,000 per year
Enterprise Security Engineer, Vulnerability Management
OpenAI · United States, San Francisco, United States
USD 347,000-445,000 per year
AI Strategist, Financial Services
Perplexity AI · San Francisco, United States, New York City, United States
USD 215,000-250,000 per year
CISO
Glean · Mountain View, United States
USD 424,300-489,400 per year
Software Engineer, Backend — Dots
OpenAI · New York City, United States
USD 347,000-385,000 per year
Principal Product Manager, Orbit
GitLab · United States, Canada
USD 203,200-345,600 per year
Senior Manager, Software Engineering - Agentic Development for Safety-Critical Systems
Nvidia · Santa Clara, United States
USD 272,000-431,200 per year