Security Engineer, Vulnerability & Automation (Remote)

VulnU; San Francisco (CA); Remote; USD 347,000 - 445,000; Full time

Benefits offered by this job

20 weeks parental leave

Retirement match

Flexible PTO

Learning budget

Equity

Job summary

OpenAI is seeking an Enterprise Security Engineer with a focus on vulnerability management to identify, prioritize, and remediate vulnerabilities across networks, endpoints, and SaaS. The role emphasizes translating findings into clear business impact and actionable remediation, and driving durable fixes through verified closure.

You will build security capabilities and automation, use AI agents to solve practical problems, and help shape how enterprise security operates as agents become more

Responsibilities

• Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook.
• Translate technical findings into clear attack paths, business impact, and actionable remediation.
• Develop and validate emergency mitigations when patches are unavailable, coordinate with system owners, vendors, and incident responders, and drive durable fixes through verified closure.
• Improve asset visibility, ownership, vulnerability data quality, and reporting.
• Build and operate security tools and integrations using code, APIs, automation, and AI agents.
• Design controls for agent access, execution, and accountability.
• Contribute across endpoint, network, identity, and SaaS security, and support incident investigations when needed.

Job description

OpenAI is seeking an Enterprise Security Engineer with a focus on vulnerability management to identify, prioritize, and remediate vulnerabilities across networks, endpoints, and SaaS. The role emphasizes translating findings into clear business impact and actionable remediation, and driving durable fixes through verified closure.

You will build security capabilities and automation, use AI agents to solve practical problems, and help shape how enterprise security operates as agents become more