Enterprise Security Engineer, Vulnerability Management

OpenAI; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

OpenAI is seeking an Enterprise Security Engineer focused on vulnerability management, novel vulnerabilities, and zero-day response. You will investigate vulnerabilities across networks, endpoints, and SaaS, prioritize risk, and drive remediation through verified outcomes.

You will build security capabilities and automation, leveraging AI agents, and help shape enterprise security as agents become a larger part of daily work.

Qualifications

• Experience investigating vulnerabilities and zero-days.
• Ability to translate findings into remediation actions.
• Experience building security tooling and automation.

Responsibilities

• Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems.
• Translate technical findings into clear attack paths, business impact, and remediation.
• Develop and validate emergency mitigations when patches are unavailable and drive durable fixes.
• Improve asset visibility, ownership, vulnerability data quality, and reporting.
• Build and operate security tools and integrations using code, APIs, automation, and AI agents.
• Design controls for agent access, execution, and accountability.
• Contribute across endpoint, network, identity, and SaaS security, and support incident investigations.

Skills

Vulnerability management

Zero-day response

Automation

AI agent usage

Job description

About the Team

Enterprise Security protects the systems, identities, devices, and services that enable OpenAI's employees to work securely and effectively. We partner across IT and Security to understand risk, build practical defenses, and support a rapidly evolving technical environment.

About the Role

We are looking for an Enterprise Security Engineer with a focus on vulnerability management, novel vulnerabilities, and zero-day response. You will investigate vulnerabilities and security weaknesses across networks, endpoints, and SaaS, prioritize them in the context of real exposure, and drive remediation through verified outcomes. You will also build security capabilities and automation, use AI agents to solve practical problems, and help shape how enterprise security operates as agents become a larger part of everyday work. This role is open to candidates in San Francisco, CA, and to remote candidates in the United States.

In this role, you will:

• Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook.
• Translate technical findings into clear attack paths, business impact, and actionable remediation.
• Develop and validate emergency mitigations when patches are unavailable, coordinate with system owners, vendors, and incident responders, and drive durable fixes through verified closure.
• Improve asset visibility, ownership, vulnerability data quality, and reporting.
• Build and operate security tools and integrations using code, APIs, automation, and AI agents.
• Design controls for agent access, execution, and accountability.
• Contribute across endpoint, network, identity, and SaaS security, and support incident investigations when needed.

You might thrive in this role if you:

• Have independently investigated novel or emerging vulnerabilities and driven enterprise remediation from uncertain initial reports through mitigation