Enterprise Security Engineer, Vulnerability Management
OpenAI · San Francisco
About this role
**Enterprise Security Engineer — Vulnerability Management** **About the Team** Enterprise Security protects the systems, identities, devices, and services that enable OpenAI’s employees to work securely and effectively. The team partners across IT and Security to understand risk, build practical defenses, and support a rapidly evolving technical environment. **About the Role** OpenAI is seeking an Enterprise Security Engineer focused on vulnerability management, novel vulnerabilities, and zero-day response. You will investigate vulnerabilities and security weaknesses across networks, endpoints, and SaaS, prioritize them based on real exposure, and drive remediation through verified outcomes. You’ll also build security capabilities and automation, use AI agents to solve practical problems, and help shape how enterprise security operates as agentic workflows become more common. **Location** - San Francisco, CA (open) - Remote within the United States (open) **In this role, you will:** - Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook. - Translate technical findings into clear attack paths, business impact, and actionable remediation. - Develop and validate emergency mitigations when patches are unavailable; coordinate with system owners, vendors, and incident responders; drive durable fixes through verified closure. - Improve asset visibility, ownership, vulnerability data quality, and reporting. - Build and operate security tools and integrations using code, APIs, automation, and AI agents. - Design controls for agent access, execution, and accountability. - Contribute across endpoint, network, identity, and SaaS security; support incident investigations when needed. **You might thrive in this role if you:** - Have independently investigated novel or emerging vulnerabilities and driven enterprise remediation from uncertain initial reports through mitigation and verified closure. - Bring technical depth in a relevant security domain with working knowledge across networks, endpoints, and SaaS. - Can understand and improve code and safely integrate APIs and security systems. - Have solved substantive problems using AI agents and can explain how you evaluated and corrected their work. - Think clearly about security tradeoffs, ambiguous evidence, and changing risks of agentic systems. - Collaborate effectively, take ownership, and communicate technical risk to varied audiences. **Equal Opportunity** OpenAI is an equal opportunity employer and does not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other legally protected characteristics. **Background Checks & Accommodations** Background checks will be administered in accordance with applicable law. OpenAI is committed to providing reasonable accommodations to applicants with disabilities—requests can be made via the provided accommodations link in the original posting.
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.