About the job
Join Our Team
At OpenAI, we are on a mission to ensure that artificial general intelligence benefits all of humanity, and security is at the core of that mission. Our Security team works tirelessly to safeguard our technology, personnel, and products. We pride ourselves on being both technical and operational, supporting all aspects of our research and products. Our guiding principles include prioritizing impactful solutions, empowering researchers, preparing for groundbreaking future technologies, and fostering a strong security culture.
About This Role
We are on the lookout for a highly skilled Principal Offensive Security Engineer to elevate and fortify OpenAI’s security framework. This isn’t just another red team position; it's a unique opportunity to engage with our technologies, design pioneering attack simulations, collaborate with defensive security teams, and drive strategic security enhancements throughout the organization.
In this role, you will not only identify vulnerabilities but also take the initiative to resolve them, automate offensive techniques using the latest technologies, and leverage your unique attacker perspective to influence our overall security strategy. Your primary focus will be on the continuous testing of our hardware products and associated services.
Your Responsibilities
- Proactively collaborate with engineering teams to enhance security measures and mitigate risks across hardware, firmware, and software.
- Conduct thorough penetration testing on our diverse range of products.
- Utilize advanced automation and OpenAI technologies to streamline your offensive security practices.
- Present clear and compelling findings to inspire significant changes in our security posture.
- Shape security strategy by providing insights rooted in attacker perspectives regarding risk and threat modeling.
Ideal Candidate Profile
- 7+ years of hands-on experience or an equivalent track record of outstanding achievements in offensive security.
- Exceptional skills in code review with a keen eye for identifying intricate vulnerabilities.
- Proven expertise in evaluating complex technology stacks, including:
- Ability to reverse engineer bootrom images, firmware, or silicon-level components.
- Hands-on experience with hardware exploitation and embedded systems.

