Security Engineer, Agent Security

Details

About the Team

The team’s mission is to accelerate the secure evolution of agentic AI systems at OpenAI. The team designs, implements, and continuously refines security policies, frameworks, and controls that defend OpenAI’s critical assets — including user and customer data — against the unique risks introduced by agentic AI.

About the Role

As a Security Engineer on the Agent Security Team, you will be at the forefront of securing OpenAI’s cutting-edge agentic AI systems. You will design and implement security frameworks, policies, and controls to safeguard OpenAI’s critical assets and ensure the safe deployment of agentic systems. You will develop threat models, partner with the Agent Infrastructure group to fortify platforms that power agentic systems, and lead efforts to enhance safety monitoring pipelines at scale. The role requires shipping solutions quickly while maintaining a high standard of quality and security. This role is based in San Francisco, CA and uses a hybrid work model (3 days in office per week). Relocation assistance is offered to new employees.

Responsibilities

• Architect security controls for agentic AI: design, implement, and iterate on identity, network, and runtime-level defenses (e.g., sandboxing, policy enforcement) that integrate with the Agent Infrastructure stack.
• Build production-grade security tooling: ship code that hardens safety monitoring pipelines across agent executions at scale.
• Collaborate cross-functionally: work daily with Agent Infrastructure, product, research, safety, and security teams to balance security, performance, and usability.
• Influence strategy & standards: shape the long-term Agent Security roadmap, publish best practices internally and externally, and help define industry standards for securing autonomous AI.

Requirements

• Strong software-engineering skills in Python or at least one systems language (Go, Rust, C/C++), plus a track record of shipping and operating secure, high-reliability services.
• Deep expertise in modern isolation techniques — experience with container security, kernel-level hardening, and other isolation methods.
• Hands-on network security experience — implementing identity-based controls, policy enforcement, and secure large-scale telemetry pipelines.
• Clear, concise communication that bridges engineering, research, and leadership audiences; comfort influencing roadmaps and driving consensus.
• Bias for action & ownership — ability to thrive in ambiguity, move quickly without sacrificing rigor, and elevate the security bar company-wide from day one.
• Cloud security depth on at least one major provider (Azure, AWS, GCP), including identity federation, workload IAM, and infrastructure-as-code best practices.
• Familiarity with AI/ML security challenges is nice-to-have but valuable — experience addressing risks associated with advanced AI systems.

Benefits

• Salary range: $325,000 - $405,000 (base pay may vary by market and experience); offers equity.
• Medical, dental, and vision insurance with employer contributions to Health Savings Accounts.
• Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental leave, paid medical and caregiver leave.
• Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees; 13+ paid company holidays and office closures.
• Mental health and wellness support; employer-paid basic life and disability coverage.
• Annual learning and development stipend; daily meals in offices and meal delivery credits as eligible.
• Relocation support for eligible employees.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. The company values diverse perspectives and is an equal opportunity employer. Background checks and accommodations for applicants with disabilities are available. For additional policies and notices, candidates are directed to OpenAI’s public policy links.