This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We're seeking an exceptional Principal-level Offensive Security Engineer to challenge and strengthen OpenAI's security posture. This role isn't your typical red team job - it's an opportunity to engage broadly and deeply, craft innovative attack simulations, collaborate closely with defensive teams, and influence strategic security improvements across the organization. You'll have the chance to not only find vulnerabilities but actively drive their resolution, automate offensive techniques with cutting-edge technologies, and use your unique attacker perspective to shape our security strategy. This role will be primarily focused on continuously testing our agent powered products like codex and operator. These systems are uniquely valuable targets because they’re rapidly evolving, have access to perform sensitive actions on behalf of users, and have large, diverse attack surfaces. You will play a crucial role in securing our agents by hunting for realistic vulnerabilities that emerge from the interactions between the applications, infrastructure, and models that power them.
Job Responsibility:
Continuously hunt for vulnerabilities in the interactions between the applications, infrastructure, and models that power our agentic products
Conduct open-scope red and purple team operations, simulating realistic attack scenarios
Collaborate proactively with defensive security teams to enhance detection, response, and mitigation capabilities
Perform comprehensive penetration testing on our diverse suite of products
Leverage advanced automation and OpenAI technologies to optimize your offensive security work
Present insightful, actionable findings clearly and compellingly to inspire impactful change
Influence security strategy by providing attacker-driven insights into risk and threat modeling
Requirements:
7+ years of hands-on red team experience or exceptional accomplishments demonstrating equivalent expertise
Deep expertise conducting offensive security operations within modern technology companies
Experience designing, developing, or testing assessing the security of AI-powered systems
Experience working finding, exploiting and mitigating common vulnerabilities in AI systems like prompt injection, leaking sensitive data, confused deputies, and dynamically generated UI components
Exceptional skill in code review, identifying novel and subtle vulnerabilities
Proven experience performing offensive security assessments in at least one hyperscaler cloud environment (Azure preferred)
Demonstrated mastery assessing complex technology stacks, including: Highly customized Kubernetes clusters, Container environments, CI/CD pipelines, GitHub security, macOS and Linux operating systems, Data science tooling and environments, Python-based web services, React-based frontend applications
Strong intuitive understanding of trust boundaries and risk assessment in dynamic contexts
Excellent coding skills, capable of writing robust tools and automation for offensive operations
Ability to communicate complex technical concepts effectively through compelling storytelling
Proven track record of not just finding vulnerabilities but actively contributing to solutions in complex codebases
Nice to have:
Background or expertise in AI or data science
Prior experience working in tech startups or fast-paced technology environments
Experience in related disciplines such as Software Engineering (SWE), Detection Engineering, Site Reliability Engineering (SRE), Security Engineering, or IT Infrastructure
What we offer:
Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend to fuel your professional growth
Daily meals in our offices, and meal delivery credits as eligible
Relocation support for eligible employees
Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided
Offers Equity
performance-related bonus(es) for eligible employees