Security Engineer, Application Security

OpenAI is seeking a Security Engineer, Application Security to help identify and mitigate vulnerabilities across software applications. This role focuses on practical application security activities, including building security tooling, conducting code reviews and penetration testing, and partnering with development teams to embed secure practices throughout the SDLC.

Key Responsibilities

• Perform regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software.
• Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats.
• Partner with development teams to integrate security best practices across the software development lifecycle, including secure coding guidelines.
• Conduct threat modeling and risk assessments to proactively identify potential risks and define mitigation strategies.
• Track, analyze, and manage application vulnerabilities, providing guidance and support for remediation efforts.
• Support investigations and analysis of application-related security incidents, including timely resolution and incident documentation.
• Stay current on emerging security threats, vulnerabilities, and technologies to continuously strengthen application security.

Required Qualifications

• Extensive experience in information security, cybersecurity, or a related field, including a significant portion of experience in leadership or management roles.
• Deep knowledge of security technologies, tools, and best practices, including experience with secure coding practices, threat modeling, risk assessments, and incident response.
• Experience in application security and software development (or related areas), with a strong understanding of secure coding practices and application security frameworks.
• Proficiency in programming languages such as Python, Java, and C++, along with knowledge of security tools including Burp Suite and OWASP ZAP, and familiarity with security protocols and encryption methods.
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Technologies

• Python
• Java
• C++
• Burp Suite
• OWASP ZAP

About the Team

• Security is foundational to OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity.
• The Security team protects OpenAI’s technology, people, and products.
• Team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture.

About the Role

In this position, you will focus on identifying and mitigating security vulnerabilities within software applications. You will do this through security tool development, code reviews, penetration testing, and structured security assessments, while collaborating with engineering teams to improve secure practices across the SDLC.

Location and Work Model

• Location: New York, NY (hybrid)
• Preferred base: San Francisco, Seattle, or New York City; remote work may be considered.
• Hybrid schedule: 3 days in the office per week
• Relocation assistance is offered to new employees.

Compensation

$234.4K – $385K per year + Offers Equity