SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
OpenAI's Enterprise Security team is seeking an Enterprise Security Engineer focused on vulnerability management, novel vulnerabilities, and zero-day response. This role sits at the intersection of traditional enterprise security and emerging AI-driven security challenges.
You will investigate vulnerabilities and security weaknesses across networks, endpoints, and SaaS systems, prioritize them based on real exposure risk, and drive remediation through verified outcomes. A key differentiator of this role is the opportunity to build security capabilities using AI agents and help shape how enterprise security evolves as agentic systems become integral to daily operations.
Key responsibilities include:
- Discovering, investigating, and prioritizing vulnerabilities and misconfigurations across enterprise infrastructure, including novel and zero-day vulnerabilities with incomplete information and no established playbooks
- Translating technical findings into clear attack paths, business impact assessments, and actionable remediation strategies
- Developing and validating emergency mitigations when patches are unavailable; coordinating with system owners, vendors, and incident responders to drive durable fixes through verified closure
- Improving asset visibility, ownership, vulnerability data quality, and reporting
- Building and operating security tools and integrations using code, APIs, automation, and AI agents
- Designing controls for agent access, execution, and accountability
- Contributing across endpoint, network, identity, and SaaS security domains; supporting incident investigations as needed
You should have independently investigated novel or emerging vulnerabilities and driven enterprise remediation from uncertain initial reports through mitigation and verified closure. Technical depth in a relevant security domain (networks, endpoints, SaaS) is expected, along with the ability to understand and improve code and safely integrate APIs and security systems. Experience solving substantive problems using AI agents, with the ability to evaluate and correct their work, is valuable. You think clearly about security tradeoffs, ambiguous evidence, and the evolving risks of agentic systems, and you collaborate effectively while communicating technical risk to varied audiences.
Requirements:
- Demonstrated experience independently investigating novel or emerging vulnerabilities and driving enterprise remediation from uncertain initial reports through mitigation and verified closure
- Technical depth in a relevant security domain with working knowledge across networks, endpoints, and SaaS
- Ability to understand and improve code and safely integrate APIs and security systems
- Experience solving substantive problems using AI agents and ability to evaluate and correct their work
- Clear thinking about security tradeoffs, ambiguous evidence, and risks of agentic systems
- Strong collaboration, ownership, and communication skills for technical risk to varied audiences
