Security Engineer, App Security — Remote

OpenAI; California (MO); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

OpenAI is seeking a Security Engineer, Application Security to identify and mitigate vulnerabilities across software applications. You will build security tools, perform code reviews, and conduct penetration testing to strengthen our SDLC security posture.

You will collaborate with development teams, provide security guidance, and help foster a culture of security awareness. Remote-friendly with a hybrid model and relocation assistance for new hires.

Qualifications

• Extensive experience in information security, cybersecurity, or a related field, with leadership/management experience.
• Deep understanding of security technologies, tools and best practices, including secure coding, threat modeling, risk assessments and incident response.
• Experience in application security, software development, or related areas with a strong understanding of secure coding practices and frameworks.
• Proficiency in programming languages (Python, Java, C++, etc.), knowledge of security tools (Burp Suite, OWASP ZAP), and familiarity with security protocols and encryption methods.
• Strong written and verbal communication skills to explain complex security issues to both technical and non-technical audiences.

Responsibilities

• Perform Security Assessments: conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications.
• Develop and Implement Security Tools: design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats.
• Collaborate with Development Teams: work closely with development teams to ensure security best practices are integrated throughout the SDLC.
• Threat Modeling and Risk Assessment: conduct threat modeling and risk assessments to proactively identify potential risks and mitigation strategies.
• Vulnerability Management: track, analyze, and manage vulnerabilities in applications, providing guidance for remediation.
• Incident Response Support: assist in investigating, analyzing, and responding to security incidents related to applications.
• Stay Current on Security Trends: continuously stay updated on latest security threats, vulnerabilities, and technologies to enhance security measures.

Skills

Python

Java

C++

Burp Suite

OWASP ZAP

Secure coding

Threat modeling

Incident response

Code reviews

Penetration testing

Tools

Burp Suite

OWASP ZAP

Job description

OpenAI is seeking a Security Engineer, Application Security to identify and mitigate vulnerabilities across software applications. You will build security tools, perform code reviews, and conduct penetration testing to strengthen our SDLC security posture.

You will collaborate with development teams, provide security guidance, and help foster a culture of security awareness. Remote-friendly with a hybrid model and relocation assistance for new hires.