Security Engineer, Application Security

Details

Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products, supporting all products and research through technical solutions and operational practices.

As a Security Engineer, Application Security, you will identify and mitigate security vulnerabilities within software applications by building security tools, conducting code reviews, performing penetration testing, and completing security assessments. You will work closely with development teams to integrate secure coding practices throughout the software development lifecycle and provide security guidance to technical and non-technical stakeholders.

The role is preferred to be based in San Francisco, Seattle, or New York City, but remote work may be considered. OpenAI uses a hybrid work model requiring three days in the office per week and offers relocation assistance to eligible employees.

Responsibilities

• Conduct security assessments, code reviews, and penetration testing to identify application and software vulnerabilities.
• Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats.
• Collaborate with development teams to integrate security best practices and secure coding guidelines throughout the software development lifecycle.
• Conduct threat modeling and risk assessments to identify potential risks and develop mitigation strategies.
• Track, analyze, and manage application vulnerabilities, providing guidance and support for remediation efforts.
• Assist with investigating, analyzing, and responding to application-related security incidents, including timely resolution and documentation.
• Stay current on security threats, vulnerabilities, technologies, and application security practices.

Requirements

• Extensive experience in information security, cybersecurity, or a related field, including significant experience in leadership or management roles.
• Deep understanding of security technologies, tools, and best practices, including secure coding, threat modeling, risk assessments, and incident response.
• Experience in application security, software development, or a related area, with a strong understanding of secure coding practices and application security frameworks.
• Proficiency in programming languages such as Python, Java, or C++.
• Knowledge of security tools such as Burp Suite and OWASP ZAP.
• Familiarity with security protocols and encryption methods.
• Strong written and verbal communication skills, with the ability to explain complex security issues to technical and non-technical audiences.

Benefits

• Equity, performance-related bonus for eligible employees, and benefits.
• Medical, dental, and vision insurance, with employer contributions to Health Savings Accounts.
• Pre-tax accounts for health, dependent care, and commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental, medical, and caregiver leave.
• Paid time off, company holidays, office closures, and paid sick and safe time.
• Mental health and wellness support.
• Employer-paid basic life and disability coverage.
• Annual learning and development stipend.
• Daily office meals and eligible meal delivery credits.
• Relocation support for eligible employees.
• Additional taxable fringe benefits may include charitable donation matching and wellness stipends.

OpenAI is an equal opportunity employer and provides reasonable accommodations to applicants with disabilities. Background checks are administered in accordance with applicable law.