Security Engineer, AI Hardware Trust & Platform

OpenAI; United States; Hybrid; USD 180,000 - 280,000; Full time

Job summary

OpenAI’s Hardware organization leads the end-to-end security foundation for first-party AI hardware systems. You will own boot integrity, device identity, attestation, and secure management across development to deployment, collaborating with silicon, firmware, infrastructure, and operations teams.

Relocation assistance is available; located in San Francisco, CA with hybrid onsite requirements. The role focuses on turning threat models into concrete security requirements, implementing resilient

Qualifications

• Experience designing security for hardware platforms and data-center scale.
• Ability to translate threat models into verifiable requirements and evidence.
• Hands-on work with boot processes, cryptographic protection, and secure firmware.

Responsibilities

• Own security requirements, threat models, validation strategy, and launch-readiness evidence for first-party hardware platforms from design through production deployment.
• Design and review secure boot, measured boot, roots of trust, platform firmware resilience, firmware signing, recovery, and anti-rollback strategies across devices.
• Own device identity, provisioning, enrollment, attestation, certificate lifecycle, and key-management requirements across manufacturing and data center bring-up.
• Harden management

Skills

Security engineering

Secure boot

Threat modeling

Device identity

Firmware security

Key management

Tools

PKI

Job description

OpenAI’s Hardware organization leads the end-to-end security foundation for first-party AI hardware systems. You will own boot integrity, device identity, attestation, and secure management across development to deployment, collaborating with silicon, firmware, infrastructure, and operations teams.

Relocation assistance is available; located in San Francisco, CA with hybrid onsite requirements. The role focuses on turning threat models into concrete security requirements, implementing resilient