Application Security Engineer — Secure Coding & Threat Modeling

OpenAI; Washington; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation assistance

Hybrid work model

Job summary

OpenAI is seeking a Security Engineer, Application Security to identify and mitigate vulnerabilities in software applications through tooling, reviews, testing, and assessments.

You will work with development teams to embed secure coding across the SDLC, provide security guidance to stakeholders, and foster a culture of security awareness. Remote work is possible with a hybrid model and relocation assistance.

Qualifications

• Experience in information security, cybersecurity, or related field with leadership/management experience.
• Strong understanding of security technologies, tools, and best practices including secure coding, threat modeling and incident response.
• Proficiency in programming languages (Python/Java/C++) and security tools like Burp Suite or OWASP ZAP.

Responsibilities

• Perform security assessments, code reviews, and penetration testing to identify vulnerabilities in applications.
• Develop and implement security tools, frameworks, and methodologies to protect applications.
• Collaborate with development teams to embed secure coding practices across the SDLC.
• Conduct threat modeling and risk assessments to identify and mitigate risks.
• Track, analyze, and remediate vulnerabilities and provide remediation guidance.
• Support incident response and document security incidents.

Skills

Python

Java

C++

Burp Suite

OWASP ZAP

Secure coding

Threat modeling

Incident response

Clear communication

Education

Bachelor's degree in CS/SE or related

Tools

Security tooling

Job description

OpenAI is seeking a Security Engineer, Application Security to identify and mitigate vulnerabilities in software applications through tooling, reviews, testing, and assessments.

You will work with development teams to embed secure coding across the SDLC, provide security guidance to stakeholders, and foster a culture of security awareness. Remote work is possible with a hybrid model and relocation assistance.