← All roles

Security Engineer, Application Security

OpenAI· Security
Apply on company site
Hybrid (New York City)$234.4k - $385kFull-timePosted 11mo ago

About the role

Security Engineer specializing in Application Security at OpenAI, focusing on identifying and mitigating vulnerabilities in software applications through security tooling, code reviews, penetration testing, and security assessments within a hybrid work model.

Responsibilities

  • Perform Security Assessments: Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software.
  • Develop and Implement Security Tools: Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats.
  • Collaborate with Development Teams: Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines.
  • Threat Modeling and Risk Assessment: Conduct threat modeling and risk assessments to proactively identify potential risks and develop mitigation strategies.
  • Vulnerability Management: Track, analyze, and manage vulnerabilities in applications, providing guidance and support for remediation efforts.
  • Incident Response Support: Assist in investigating, analyzing, and responding to security incidents related to applications, ensuring timely resolution and documentation of incidents.
  • Stay Current on Security Trends: Continuously stay updated on the latest security threats, vulnerabilities, and technologies to enhance security measures in applications.

Qualifications

  • Extensive experience in information security, cybersecurity, or a related field, with leadership or management experience.
  • Deep understanding of security technologies, tools, and best practices, including secure coding, threat modeling, risk assessments, and incident response.
  • Experience in application security, software development, or related areas with strong secure coding practices and application security frameworks.
  • Proficiency in programming languages (e.g., Python, Java, C++), familiarity with security tools (e.g., Burp Suite, OWASP ZAP), and knowledge of security protocols and encryption methods.
  • Strong written and verbal communication skills, with the ability to explain complex security issues to technical and non-technical audiences.

Skills

Required:Security AssessmentsSecurity ToolingSDLC CollaborationThreat ModelingVulnerability ManagementIncident ResponseCommunication

Benefits

  • Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
  • Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
  • 401(k) retirement plan with employer match
  • Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
  • Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
  • 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick and safe time (1 hour per 30 hours worked)
  • Mental health and wellness support
  • Employer-paid basic life and disability coverage
  • Annual learning and development stipend
  • Daily meals in our offices, and meal delivery credits as eligible
  • Relocation support for eligible employees
  • Additional taxable fringe benefits, such as charitable donation matching and wellness stipends
Last updated Sep 3, 2026. Interested? Apply on the company site.

About OpenAI

ai-infrastructure-and-developmentliquid-ai-recruiting-targetllmsetter-30setter-30-2026-q1speech-to-texttext-to-speechvoice-ai-stack
Company profileWebsite

More open roles at OpenAI