Job Title: Security Researcher, Codex Security
Compensation:
$325K – $405K • Offers Equity
The base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. If the role is non-exempt, overtime pay will be provided consistent with applicable laws. In addition to the salary range listed above, total compensation also includes generous equity, performance-related bonus(es) for eligible employees, and the following benefits.
- Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
- Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
- 401(k) retirement plan with employer match
- Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
- Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
- 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
- Mental health and wellness support
- Employer-paid basic life and disability coverage
- Annual learning and development stipend to fuel your professional growth
- Daily meals in our offices, and meal delivery credits as eligible
- Relocation support for eligible employees
- Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided.
About the Team:
Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity.
Codex Security is OpenAI’s first security agent, built to scan GitHub Cloud repositories, validate real vulnerabilities, and integrate with Codex to help generate fixes.
About the Role:
Lead an effort to map, characterise, and prioritise cross-layer vulnerabilities in advanced AI systems – spanning data pipelines, training/inference runtimes, system and supply chain components. You’ll drive offensive research, produce technical deliverables, enhance the Codex Security product line, and serve as OpenAI’s primary technical counterpart for select external partners (including potential U.S. government stakeholders).
Responsibilities:
- Conduct deep security research on real-world software systems to discover complex vulnerabilities across large codebases and distributed architectures.
- Investigate and validate vulnerabilities discovered by AI-driven security agents, including building proofs-of-concept and exploit demonstrations.
- Partner with engineering teams to improve automated vulnerability discovery, validation, and remediation workflows as part of product development.
- Build high-quality security datasets and evals that will help advance model’s cybersecurity capabilities
- Train and improve AI models used for vulnerability discovery, validation, and automated remediation by developing datasets, evaluations, and feedback loops grounded in real-world security research.
- Publish technical write-ups, research insights, and vulnerability analyses that advance the state of application security.
You may thrive if you:
- Have strong experience in vulnerability research, exploit development, or offensive security.
- Have deep experience with cutting-edge offensive-security techniques
- Are fluent across AI/ML infrastructure (data, training, inference, schedulers, accelerators) and can threat-model end-to-end.
- Operate independently, align diverse teams, and deliver on tight timelines.
- Communicate clearly and concisely with experts and decision-makers.
- Care deeply about improving the security of widely used software and open-source infrastructure.
- Are a strong developer who can work in a small energetic team
Goals & impact:
- Build AI-driven systems that can discover high-impact vulnerabilities in widely deployed systems and open-source software before attackers do.
- Improve the precision and effectiveness of AI-driven security agents by grounding them in real-world vulnerability research.
Key technical challenges:
- System-level vulnerability discovery , identifying complex vulnerabilities that span multiple services, trust boundaries, or components.
- High-confidence validation , distinguishing real exploitable vulnerabilities from speculative or theoretical issues.
- Scaling security research with AI agents , guiding automated systems to analyse millions of commits while maintaining research-level rigor.
- Automated exploit and proof-of-concept generation , building reproducible demonstrations of vulnerabilities within sandboxed environments.
- Building large systems that work within OpenAI’s enterprise architecture
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, colour, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
For additional information, please see [OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement](https://cdn.openai.com/policies/eeo-policy-statement.pdf).
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through [this form](https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA). No response will be provided to inquiries unrelated to job posting compliance.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this [link](https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241).
[OpenAI Global Applicant Privacy Policy](https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf)
At OpenAI, we believe artificial intelligence has the potential to benefit society in countless ways, and we want to ensure that everyone has access to the resources they need to succeed. That’s why we’re committed to creating a workplace where everyone feels welcome, valued, and empowered to contribute their best work.
We strive to create a culture of inclusivity, diversity, and respect, where everyone feels comfortable sharing their ideas, perspectives, and experiences. We believe that our differences are what make us stronger, and we’re committed to fostering a workplace where everyone can thrive.
If you’re passionate about using AI to drive positive change and want to join a team that shares your values, we encourage you to apply for this role. Together, let’s build a brighter future for all.
XML job scraping automation by YubHub
