Security Engineer, Application Security

OpenAI is hiring a Security Engineer focused on Application Security to strengthen the security posture of software applications. In this hybrid role, you will identify and mitigate vulnerabilities through hands-on testing, security tool development, and close collaboration with engineering teams across the SDLC.

Key Responsibilities

• Perform regular security assessments, code reviews, and penetration testing to identify vulnerabilities across applications and software.
• Design, develop, and implement security tools, frameworks, and methodologies to help protect applications from security threats.
• Partner with development teams to ensure security best practices are embedded throughout the software development lifecycle, including secure coding guidelines.
• Conduct threat modeling and risk assessments to proactively identify potential risks and develop mitigation strategies.
• Track, analyze, and manage application vulnerabilities, providing guidance and support to drive remediation.
• Assist with investigating, analyzing, and responding to application-related security incidents, including timely resolution and documentation.
• Stay current on emerging security threats, vulnerabilities, and technologies to continually improve application security measures.

Requirements

• Extensive experience in information security, cybersecurity, or a related field, including a significant portion of experience in leadership or management roles.
• Deep understanding of security technologies, tools, and best practices, including secure coding practices, threat modeling, risk assessments, and incident response.
• Experience in application security, software development, or related areas with a strong understanding of secure coding practices and application security frameworks.
• Proficiency in programming languages such as Python, Java, and C++, along with knowledge of security tools including Burp Suite and OWASP ZAP, and familiarity with security protocols and encryption methods.
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Technologies

• Python
• Java
• C++
• Burp Suite
• OWASP ZAP

About the Team

Security is foundational to OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. Team tenets include prioritizing for impact, enabling researchers, preparing for future transformative technologies, and maintaining a robust security culture.

Role Overview

In this position, you will identify and mitigate security vulnerabilities in software applications by building security tools, conducting code reviews, running penetration testing, and delivering security assessments. You will also support remediation efforts and contribute to incident investigation and response for application security issues.

Location and Work Model

• New York, NY (hybrid).
• Preferred locations include San Francisco, Seattle, or New York City; remote work may be considered.
• Hybrid schedule: 3 days in the office per week.
• Relocation assistance is offered to new employees.

Compensation

USD 234,400 - 385,000 per year plus offers equity.