Software Engineer, Full Stack - Cybersecurity Products

OpenAI•San Francisco, CA

1d•$230,000 - $325,000•Hybrid

About The Position

The Cybersecurity Products team builds products at the frontier of AI and cybersecurity. Our work includes Codex Security and related cyber products that turn advances in model capability into dependable tools for defenders. We help teams find, validate, and remediate vulnerabilities, continuously improve the security of software, and test AI-powered applications before they reach production. As a Full Stack Software Engineer, you will build the product experiences and systems that make AI-powered security useful in real engineering environments. You will work across web surfaces, APIs, orchestration, data models, and integrations to help security and engineering teams move from a codebase or application to evidence-backed findings, prioritized remediation, and revalidation. You will collaborate closely with product engineers, security researchers, and customer-facing teams. The work spans fast-moving product development and hard systems problems: long-running workflows, large repositories, sensitive data, reliability, observability, and a high bar for earning user trust. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.

Requirements

Experience shipping production full-stack products across modern web frontends and backend services.
Ability to design clear APIs and data models, reason about asynchronous systems, and diagnose reliability or performance problems.
Care about building products that experts trust while making sophisticated workflows usable for a broader set of engineers.
Strong judgment around privacy, security, and correctness.

Nice To Haves

Application-security or cybersecurity experience is helpful, but not required.

Responsibilities

Build end-to-end workflows for vulnerability discovery, security scanning, red teaming, findings review, remediation, and reruns.
Design and operate backend services for long-running security work, including APIs, asynchronous orchestration, durable state, and integrations with developer workflows.
Make complex security results actionable through clear product surfaces, strong evidence, thoughtful prioritization, and reliable reporting.
Partner with security researchers, product teams, and users to evaluate quality, reduce noise, improve coverage, and ship safely.