Enterprise Security Engineer, Vulnerability Management
$347k - $445k • Remote • San Francisco • FullTime
Posted 6h ago
Job Location
San Francisco
Tech Stack
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
OpenAI is seeking an Enterprise Security Engineer with a specialization in vulnerability management, novel vulnerabilities, and zero-day response. This role involves investigating and prioritizing security weaknesses across various systems, including networks, endpoints, and SaaS, and driving their remediation. The engineer will also be responsible for building security capabilities and automation, leveraging AI agents to address practical challenges, and contributing to the evolution of enterprise security practices as AI agents become more integrated into daily workflows. This position is open to candidates in San Francisco, CA, and remote candidates within the United States.
Responsibilities
- Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days.
- Translate technical findings into clear attack paths, business impact, and actionable remediation plans.
- Develop and validate emergency mitigations, coordinate with system owners and vendors, and drive durable fixes.
- Improve asset visibility, ownership, vulnerability data quality, and reporting.
- Build and operate security tools and integrations using code, APIs, automation, and AI agents.
- Design controls for agent access, execution, and accountability.
- Contribute to endpoint, network, identity, and SaaS security, and support incident investigations.
Requirements
- Independently investigated novel or emerging vulnerabilities and driven enterprise remediation.
- Technical depth in a relevant security domain and working knowledge across networks, endpoints, and SaaS.
- Ability to understand and improve code and safely integrate APIs and security systems.
- Experience solving substantive problems using AI agents and evaluating their work.
- Ability to think clearly about security tradeoffs, ambiguous evidence, and the risks of agentic systems.
- Effective collaboration, ownership, and communication of technical risk to varied audiences.