Cyber Security Engineer Technical Lead in San Francisco

About the Team Our Safety Systems team is at the forefront of OpenAI's mission to build and deploy safe AGI, driving our commitment to AI safety and fostering a culture of trust and transparency. Within Safety Systems, the Model Policy team aligns model behavior with desired human values and norms. We co-design policy with models and for models by driving rapid policy taxonomy iteration based on data and defining evaluation criteria for foundational models’ ability to reason about safety. About the Role Frontier AI systems are rapidly expanding what is possible in cybersecurity and software engineering. These capabilities create major defensive opportunities, but they also raise serious dual-use and misuse risks across areas such as malware development, exploit discovery, vulnerability chaining, credential abuse, cyber intrusion, and autonomous offensive operations. In this role, you will help define how OpenAI’s models should behave in high-risk cybersecurity contexts. You will develop policy frameworks, threat models, taxonomies, evaluations, and behavioral specifications that guide model behavior across training, deployment, and monitoring systems. This role sits at the intersection of cybersecurity, AI safety, threat modeling, evaluation science, and policy implementation. You will work closely with research, engineering, safety training, preparedness, and product teams to build policies that are technically grounded, measurable, enforceable, and responsive to real-world cyber risk. Your Responsibilities: Design and maintain model policies for cybersecurity and frontier-risk domains, especially dual-use and high-risk cyber capabilities. Translate cybersecurity threat models into clear behavioral specifications, evaluation criteria, grading guidance, and system-level mitigations. Define practical boundaries between legitimate security research, defensive workflows, and assistance that could materially enable harmful activity. Build policy artifacts that support i

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Threat Intelligence team protects OpenAI’s technology, people, research, and infrastructure by proactively identifying and disrupting adversaries who seek to compromise our systems or misuse our models. We investigate sophisticated threats, build tooling to scale and augment analysis, and deliver intelligence that shapes security strategy and equips leadership with timely, risk-aware insights. We combine technical depth, investigative rigor, and strong cross-functional partnerships to uncover threats and drive impact across OpenAI’s security and research organizations. About the Role As a Technical Threat Investigator at OpenAI, you will help protect the company from sophisticated adversaries targeting OpenAI and the broader ecosystem, as well as those attempting to misuse our models in support of cyber operations. This is a deeply investigative role. You will independently conduct complex, end-to-end investigations into capable threat actors to understand their behavior, infrastructure, emerging techniques, and how AI is integrated into their workflows. You’ll use these insights to proactively identify malicious activity and drive detection, disruption, enforcement, and safety improvements across the company. You’ll translate your investigative findings into durable solutions that scale impact. You’ll build and own lightweight tooling, automate where it matters, and create AI-assisted workflows to make investigations faster, more repeatable, and more effective over time. In this role, you will: Conduct deep, end-to-end investigations into sophisticated threat actors interacting with OpenAI’s models, products, and broader ecosystem. Think like an adversary — model attacker behavior, anticipate misuse patterns, and proactively hunt for, identify, and disrupt malicious activity. Leverage internal telemetry, OSINT, vendor data, a

About the Team OpenAI’s mission is to ensure that general-purpose artificial intelligence benefits all of humanity. Our Communications team includes External Communications, Internal Communications, and other strategic communications functions. This team’s ethos is to support OpenAI’s mission and goals by clearly and authentically explaining our technology, values, and approach to safely building powerful AI. About the Role We’re looking for a senior communications leader to shape how OpenAI communicates about cybersecurity. This person will define the global narrative, lead communications for major product, research, and business milestones, and build sustained programs that explain how OpenAI is helping advance cyber defense while managing the risks created by increasingly capable models. The role will connect OpenAI’s work across cybersecurity products and capabilities, responsible deployment, threat intelligence, enterprise security, research, and public policy. You will work closely with Security, Product, Research, Preparedness, Safety, Global Affairs, Go-to-Market, Legal, and Marketing to anticipate opportunities and risks, develop coordinated communications, and build trust with security practitioners, customers, policymakers, and the public. This is both a strategic and hands-on role. The right person will be comfortable defining a long-term communications strategy, building the systems and relationships needed to execute it, and personally leading through major launches, technical disclosures, and fast-moving issues. This role reports to the Head of Communications, Business and is based in San Francisco, CA. We use a hybrid work model of 3 days per week in the office and offer relocation assistance. In this role, you will: Define and lead communications strategy for OpenAI’s cybersecurity work, from global narrative development through launches, research, threat reporting, and sustained storytelling. Build a clear, differentiated story about how OpenAI can

About the team ​​Preparedness is a critical Safety Research team at OpenAI, which is focused on mitigating AI threats to global security that could scale to an extreme level of severity. Our work involves: Measurement. Monitoring and predicting the evolving capabilities of frontier AI systems. Mitigation. Keeping misuse safeguards, alignment tools, and security measures on track to adequately address extreme threats that might arise in the future. Coordination. Setting mitigation targets by maintaining OpenAI’s preparedness framework , and partnering with other staff to achieve these targets. This is urgent, fast-paced work that has far-reaching implications for the company and for society. About the role Models are becoming increasingly capable—moving from tools that assist humans to agents that can plan, execute, and adapt in the real world. As we push toward AGI, cybersecurity becomes one of the most important and urgent frontiers: the same systems that can accelerate productivity can also accelerate exploitation. As a Researcher for cybersecurity risks, you will help design and implement an end-to-end mitigation stack to reduce severe cyber misuse across OpenAI’s products. This role requires strong technical depth and close cross-functional collaboration to ensure safeguards are enforceable, scalable, and effective. You’ll contribute directly to building protections that remain robust as products, model capabilities, and attacker behaviors evolve. In this role, you will: Design and implement mitigation components for model-enabled cybersecurity misuse—spanning prevention, monitoring, detection, and enforcement—under the guidance of senior technical and risk leadership. Integrate safeguards across product surfaces in partnership with product and engineering teams, helping ensure protections are consistent, low-latency, and scale with usage and new model capabilities. Evaluate technical trade-offs within the cybersecurity risk domain (coverage, latency, model util

About the Team The OpenAI Audit Team is on a mission to build the future of internal audit from the ground up. Our ambition will be powered by a high-energy, technically exceptional team with the judgment, intellectual curiosity, and creativity to harness the latest advances in AI and design a truly next-generation audit function. As AI reshapes how work is performed across the enterprise, Internal Audit will use AI, automation, and data analytics to identify and assess the most significant and emerging risks across the business, including technology, cybersecurity, finance, compliance, operations, and data. We will build trusted partnerships at every level—from the Board of Directors and senior leadership to the teams delivering on OpenAI’s mission every day. We will operate as both an independent assurance provider and a trusted advisor, bringing an objective and pragmatic perspective to critical decisions. By engaging closely with management while preserving our independence, we will help the business innovate responsibly, move with confidence, and manage risk without creating unnecessary barriers. About the Role As the Cybersecurity & Technology Audit Leader, you will help shape the strategy, methodology, technology, and culture of a new audit function. You will lead complex audits and advisory reviews of cybersecurity, technology, data, and AI-related risks while advising leaders on practical ways to strengthen governance, resilience, and risk management. You are an experienced, hands-on professional who combines deep technical expertise with strong business judgment. You can quickly move between executive-level governance questions and detailed technical analysis, use data to identify and assess risk, and form clear, well-supported conclusions in fast-moving or ambiguous situations. You will have meaningful influence over how the function develops, including how we apply AI, automation, and analytics to audit planning, testing, monitoring, and reporting. T

About the Team OpenAI's Legal team plays a crucial role in furthering OpenAI's mission by tackling innovative, fundamental legal issues in AI. If you're passionate about doing significant and unique work as a technology lawyer, this team is for you. The team comprises legal professionals from diverse fields, including technology, privacy, IP, corporate, cybersecurity, employment, tax, regulatory, and litigation. About the Role We’re growing our Litigation and Regulatory team and seek an experienced counsel to lead high-stakes regulatory investigations, enforcement matters, and related litigation involving AI. You will own matters from initial inquiry through resolution, develop practical strategies for novel and technically complex issues, and translate an evolving factual record into clear advice. The role works closely with Legal, Product, Research, Safety, Security, Communications, Global Affairs, and executive stakeholders. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Lead regulatory inquiries, investigations, and enforcement matters in the United States and internationally, including matters involving federal agencies, state attorneys general, and international regulatory bodies. Develop strategy for contested enforcement proceedings and related litigation, including challenges to investigative demands and coordination across parallel matters. Partner with litigation and subject-matter counsel on related civil disputes, including privacy, consumer protection, class actions, cybersecurity, competition, copyright, trademark, and other IP issues. Manage subpoenas, civil investigative demands, requests for information from regulators and related entities, and discovery. Prepare employees and executives for interviews, testimony, depositions, trial, and other appearances before regulators. Negotiate resolutions to demands, complaints, and

About the Team Critical Harm Operations sits within User Safety & Risk Operations and builds enforcement systems for the most severe user-safety risks—including Frontier Risk and Material Harm—that are accurate, fast, defensible, and scalable. The Cyber vertical turns policy into reviewer standards, calibrated judgment, quality systems, escalation paths, and safe automation. About the Role We’re looking for a senior cybersecurity and cyber intelligence practitioner who is also an operations leader, strategist, and people manager. You’ll bring sound cyber judgment, strong analytical and automation instincts, and the ability to stay close to the work while setting direction, managing and developing people, aligning partners, building programs from 0→1, and translating ambiguity into durable operating systems. This role combines senior individual-contributor depth with direct people-management accountability. You’ll personally shape complex cyber judgments, operating models, SOPs, quality systems, and automation strategies while building, coaching, and holding accountable a high-performing team. You’ll also lead through influence across FTEs, BPO partners, and cross-functional teams. Baseline operational health—including quality, queue coverage, productivity, and SLA adherence—is table stakes; success is additionally measured by durable improvements to decision quality, stakeholder alignment, reviewer capability, and the systems that run the operation. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Set the strategic direction for Cyber Operations and translate high-level organizational priorities into a clear operating model, roadmaps, SOPs, escalation paths, quality goals, and safe-access strategies. Serve as the senior cybersecurity and cyber intelligence expert for complex and high-risk decisions across ChatGPT, API, Codex, agents, and

ABOUT THE TEAM Critical Harm Operations sits within User Safety & Risk Operations and builds enforcement systems for Frontier Risk and Material Harm that are accurate, fast, defensible, and built to scale. The Cyber vertical turns policy into reviewer standards, calibrated judgment, quality systems, escalation paths, and automation guardrails. ABOUT THE ROLE We are looking for a senior cybersecurity practitioner and operations strategist to raise the quality, scalability, and technical rigor of our Cyber Operations. You will combine hands-on cyber judgment with systems-level operating design: resolve the hardest dual-use questions, evolve SOPs, uplift reviewers and vendors, and build practical tools and automations. This is a senior IC role. Success is not primarily cases closed; it is durable improvement in the operating model and the reviewers who run it. IN THIS ROLE, YOU WILL: Drive the Cyber Operations operating model across domain priorities, SOPs, escalation paths, quality health, vendor capability, roadmap inputs and help inform trusted access strategies. Serve as the senior cyber expert for complex or high-risk decisions across ChatGPT, API, Codex, agents, and emerging product surfaces. Translate policy ambiguity, quality misses, appeals, and reviewer disagreement into clear decision rules, calibration examples, training, and tooling requirements. Build durable operating systems and quality loops: golden sets, holdouts, double-labeling, adjudication, error taxonomies, reviewer calibration, and automation evaluations. Raise FTE and BPO capability through onboarding, certification, coaching, recurring calibration, and vendor-performance partnership. Use quality, appeals, SLA, backlog, and disagreement signals to diagnose root causes and prioritize high-leverage fixes. Build hands-on solutions—SQL analyses, scripts, dashboards, LLM eval workflows, evidence enrichment, routing logic, and lightweight automations—that improve decision quality and reduce manua

About the Team OpenAI's Legal team plays a crucial role in furthering OpenAI's mission by tackling innovative, fundamental legal issues in AI. If you're passionate about doing significant and unique work as a technology lawyer, this team is for you. The team comprises legal professionals from diverse fields, including technology, privacy, IP, corporate, cybersecurity, employment, tax, regulatory, and litigation. About the Role We’re growing our world-class Legal team and seek an experienced counsel to lead our global hardware IP portfolio initiatives, including patent, trademark and other intellectual property matters related to our business. This role is highly cross-functional across OpenAI, including work across our Legal, Communications, Global Affairs, Product, Research and Executive teams. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Own global hardware IP initiatives, including setting and executing on the strategic direction and management of our hardware IP portfolio. Create scalable processes internally and externally with outside counsel to build, maintain and protect our hardware IP portfolio. Developing and maintaining internal hardware IP policies and programs. Engaging externally on hardware IP policy issues. Advising on strategic hardware IP deals. Advising on hardware IP issues, ranging from patent, trademark, trade secret to open source. Developing and building internal AI expertise, processes and tools to facilitate legal team work. Experience advising on complex technology transactions and inbound technology licensing. You might thrive in this role if you: Have at least 10+ years of combined hardware IP experience at innovative technology companies and law firms. Have a JD and license or qualification to practice in CA. Have a strong sense of ownership, are inquisitive and enthusiastic about technology, enjoy being con

About the team The Intelligence and Investigations team seeks to rapidly identify and mitigate abuse and strategic risks to ensure a safe online ecosystem in close collaboration with our internal and external partners. Our efforts contribute to OpenAI's overarching goal of developing AI that benefits humanity. This role focuses specifically on AI Safety: understanding and mitigating risks created or amplified by increasingly capable AI systems. It is not a cybersecurity, information security, or corporate security role. The Strategic Intelligence & Analysis (SIA) team provides safety intelligence for OpenAI’s products by monitoring, analyzing, and forecasting real-world abuse, geopolitical risks, and strategic threats. Our work informs AI safety mitigations, product decisions, and partnerships, ensuring OpenAI’s tools are deployed responsibly across critical sectors. About the role We are looking for a Frontier AI Risks Lead to help us understand potential harms and misuse of AI in a time of rapid, sustained change. We seek to understand how developments in AI could intersect with misuse and abuse, accelerating existing harm areas and creating novel risks. We seek to scan available signals and use strategic foresight methodologies to enable proactive detection and mitigation of frontier AI risks. This is an AI safety role focused on frontier and systemic risks, including model misalignment, recursive self-improvement (RSI), multi-agent interaction, loss of control, runaway agents, and related emerging failure modes. In this role, you will help provide a strategic-level perspective on a range of frontier AI safety areas, producing actionable understanding of issues relevant to OpenAI’s platforms, systems, and broader mission. Utilizing mixed quantitative and qualitative methodologies, you will spot early warning signs, pull threads on potentially concerning behavior, and turn weak signals into clear, prioritized risk calls. You will focus on upstream ecosystem sc

About the Team The Product Marketing team shapes how OpenAI brings its research, models, and products to market. We work across Research, Product, Engineering, Sales, Communications, and Marketing to translate technical advances into clear customer value, compelling market narratives, and go-to-market strategies that drive meaningful adoption. About the Role We’re looking for a senior product marketing leader to shape how OpenAI’s models and research are understood and adopted around the world. You’ll work directly with frontier research teams to understand emerging capabilities and translate them into compelling product strategies, market narratives, and customer experiences. Your scope will span frontier models, specialized models for cybersecurity and life sciences, multimodal capabilities, and the API portfolio that makes these systems accessible to developers and businesses. You’ll build and lead the team responsible for helping customers understand what our models can do, how they’re evolving, and how to deploy them responsibly. In this role, you will: Define the product marketing strategy for OpenAI’s models, research advances, and API portfolio. Embed with Research, Product, and Engineering to understand model capabilities, evaluations, limitations, and technical tradeoffs. Shape how OpenAI explains advances in AI to developers, business leaders, and the broader market. Lead positioning, launches, demonstrations, and adoption strategies across frontier, specialized, and multimodal models. Help customers navigate model selection, API access, privacy, security, and responsible deployment. Bring customer and market insights into research and product decisions. Partner with Sales, Solutions, Partnerships, and regional teams to develop customer narratives, use cases, and enablement. Work with Communications, Safety, Policy, and Legal to ensure technical claims are accurate and grounded. Build and lead a high-performing product marketing team and define success ac

About the Team The OpenAI Audit Team is on a mission to build the future of internal audit from the ground up. Our ambition will be powered by a high-energy, technically exceptional team with the judgment, intellectual curiosity, and creativity to harness the latest advances in AI and design a truly next-generation audit function. As AI reshapes how work is performed across the enterprise, Internal Audit will use AI, automation, and data analytics to identify and assess the most significant and emerging risks across the business, including technology, cybersecurity, finance, compliance, operations, and data. We will build trusted partnerships at every level—from the Board of Directors and senior leadership to the teams delivering on OpenAI’s mission every day. We will operate as both an independent assurance provider and a trusted advisor, bringing an objective and pragmatic perspective to critical decisions. By engaging closely with management while preserving our independence, we will help the business innovate responsibly, move with confidence, and manage risk without creating unnecessary barriers. About the Role As the Finance & Operations Audit Leader, you will help shape the strategy, methodology, technology, and culture of a new audit function. You will lead complex audits, forensic and investigative reviews, and advisory work across financial reporting, accounting, finance, and business operations, while addressing related compliance risks. You will advise leaders on practical ways to strengthen governance, execution, accountability, and risk management. You are an experienced, hands-on professional who combines deep finance and accounting knowledge with strong audit, risk, and business judgment. Your work will span across finance & accounting areas including treasury, tax, revenue, financial planning, business operations, and enterprise governance, with opportunities to apply forensic accounting techniques to complex transactions, anomalies, and pot

About the Role We’re looking for a senior individual contributor to lead GTM Strategy & Operations for Security & Safety, in close partnership with the Policy team. This role will help translate policy, security, and safety considerations into clear GTM strategies, operating models, launch plans, and scalable execution mechanisms. You’ll work across Product, Policy, Safety, Security, Legal, Data, Sales, Customer Success, Marketing, and Revenue Operations to understand customer and field needs, shape business recommendations, and support the successful adoption of security- and safety-critical products and capabilities. This role is ideal for someone who combines strong strategic and operational judgment with the ability to work effectively on complex policy-adjacent topics. You’ll help ensure that GTM plans reflect relevant policy requirements and that recurring customer and field insights inform future policy and product decisions. In this role, you will: Define the GTM operating model for the Security & Safety program, including ownership, decision forums, planning cadences, and escalation paths. Partner with Policy, Product, Security, Safety, Legal, and Data to translate policy considerations into actionable GTM guidance and operating processes. Develop go-to-market strategy for cybersecurity models, including target customers, use cases, commercialization approach, launch readiness, success metrics, and field enablement. Build mechanisms to capture recurring customer and field needs related to security, safety, application security, and policy implementation. Translate customer feedback and field requirements into recommendations for product roadmaps, policy development, enablement, and operational priorities. Support the operationalization of data-retention policies and related customer or deployment requirements across GTM. Track customer demand, implementation blockers, and market signals to refine GTM strategy and inform Policy and Product partne

About the Team Models are becoming increasingly capable—moving from tools that assist humans to agents that can plan, execute, and adapt in the real world. Mitigating the frontier risks resulting from these capabilities is paramount to OpenAI’s ability to continue deploying models safely. The Preparedness team is dedicated to addressing these critical risks. Our work includes: Measurement. Monitoring and predicting the evolving capabilities of frontier AI systems. Mitigation. Keeping misuse and misalignment safeguards, alignment tools, and security measures on track to adequately address extreme threats that might arise in the future. Coordination. Setting mitigation targets by maintaining OpenAI’s preparedness framework , and partnering with other staff to achieve these targets. This is urgent, fast-paced work that has far-reaching implications for the company and for society. About the Role We are seeking exceptional researchers who can push the frontier of safety mitigations. You will help derisk frontier models by developing novel safety mitigations, developing and applying new techniques from domains like interpretability, control, and alignment to ensure the safety of OpenAI’s deployed models. You will play a critical role in defining how a safe AI system should look in the future at OpenAI, making a significant impact on our mission to build and deploy safe AGI. This role requires strong technical depth and close cross-functional collaboration to ensure our safety mitigations are enforceable, scalable, and effective. We seek researchers who can partner with experts across domains such as misalignment, cybersecurity, and biology in order to develop the best possible end-to-end safety stack. In this role, you will: Work on identifying emerging AI safety risks and new methodologies for exploring and mitigating the impact of such risks Build (and then continuously refine) the evaluations that enable us to assess the extent of these risks; this might include worki