Enterprise Security Engineer, Vulnerability Management
About The Position
OpenAI is seeking an Enterprise Security Engineer focused on vulnerability management, novel vulnerabilities, and zero-day response. The role investigates vulnerabilities and security weaknesses across networks, endpoints, and SaaS, assesses them in the context of real exposure, and drives remediation through verified outcomes. It also builds security capabilities and automation, applies AI agents to practical problems, and helps shape enterprise security as agents become more common in everyday work. The role is open to candidates in San Francisco, California, and remote candidates in the United States.
Requirements
- Independently investigated novel or emerging vulnerabilities and driven enterprise remediation from uncertain initial reports through mitigation and verified closure.
- Technical depth in a relevant security domain and working knowledge across networks, endpoints, and SaaS.
- Ability to understand and improve code and safely integrate APIs and security systems.
- Experience solving substantive problems using AI agents and explaining how their work was evaluated and corrected.
- Ability to reason clearly about security tradeoffs, ambiguous evidence, and the changing risks of agentic systems.
- Ability to collaborate effectively, take ownership, and communicate technical risk to varied audiences.
Responsibilities
- Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook.
- Translate technical findings into clear attack paths, business impact, and actionable remediation.
- Develop and validate emergency mitigations when patches are unavailable; coordinate with system owners, vendors, and incident responders; and drive durable fixes through verified closure.
- Improve asset visibility, ownership, vulnerability data quality, and reporting.
- Build and operate security tools and integrations using code, APIs, automation, and AI agents.
- Design controls for agent access, execution, and accountability.
- Contribute across endpoint, network, identity, and SaaS security, and support incident investigations when needed.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
