Enterprise Security Engineer, Vulnerability Management
- Location
- San Francisco, CA (Remote)
- Job type
- Full-time
- Level
- Senior
- Listed
- 23 days ago
Skills & highlights for this role
- vulnerability management
- attack path analysis
- security automation
- AI agents
- vulnerability prioritization
Also useful
- API integration
About the Role
We are looking for an Enterprise Security Engineer with a focus on vulnerability management, novel vulnerabilities, and zero-day response. You will investigate vulnerabilities and security weaknesses across networks, endpoints, and SaaS, prioritize them in the context of real exposure, and drive remediation through verified outcomes.
You will also build security capabilities and automation, use AI agents to solve practical problems, and help shape how enterprise security operates as agents become a larger part of everyday work.
This role is open to candidates in San Francisco, CA, and to remote candidates in the United States.
In this role, you will
- Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook.
- Translate technical findings into clear attack paths, business impact, and actionable remediation.
- Develop and validate emergency mitigations when patches are unavailable, coordinate with system owners, vendors, and incident responders, and drive durable fixes through verified closure.
- Improve asset visibility, ownership, vulnerability data quality, and reporting.
- Build and operate security tools and integrations using code, APIs, automation, and AI agents.
- Design controls for agent access, execution, and accountability.
- Contribute across endpoint, network, identity, and SaaS security, and support incident investigations when needed.
You might thrive in this role if you
- Have independently investigated novel or emerging vulnerabilities and driven enterprise remediation from uncertain initial reports through mitigation and verified closure.
- Bring technical depth in a relevant security domain and working knowledge across networks, endpoints, and SaaS.
- Can understand and improve code and safely integrate APIs and security systems.
- Have solved substantive problems using AI agents and can explain how you evaluated and corrected their work.
- Think clearly about security tradeoffs, ambiguous evidence, and the changing risks of agentic systems.
- Collaborate effectively, take ownership, and communicate technical risk to varied audiences.
About the Team
Enterprise Security protects the systems, identities, devices, and services that enable OpenAI's employees to work securely and effectively. We partner across IT and Security to understand risk, build practical defenses, and support a rapidly evolving technical environment.
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form No response will be provided to inquiries unrelated to job posting compliance.
Equal opportunity and legal notices
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates.
For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information.
In addition, job duties require access to secure and protected information technology systems and related data security obligations.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link
From OpenAI's careers page, first listed on Rolev.ai on October 17, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Enterprise Security Engineer, Vulnerability Management role at OpenAI, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Similar roles
All Information Security Analyst jobs- Information Security AnalystAppian Corporation · McLean, VA
- Information Security AnalystTenable, Inc. · Headquarters, MD
- Mission Application Analyst (Journeyman)CACI · Ashburn, VA
- Information Security AdministratorDabella · Austin, TX
- Principal DevOps Engineer (Top Secret Clearance)Ngc · Manhattan Beach, CA · $114k – $171k/yr
- Infrastructure Engineering Senior Analyst, Networking - Cigna HealthcareCigna · Missoula, MT
Common questions
Where is the Enterprise Security Engineer, Vulnerability Management job at OpenAI located?
Yes, this Enterprise Security Engineer, Vulnerability Management opening at OpenAI is listed as San Francisco, CA (Remote). Always check OpenAI's application page for specific state eligibility or relocation policies.
What qualifications are required for Enterprise Security Engineer, Vulnerability Management at OpenAI?
For the Enterprise Security Engineer, Vulnerability Management role, OpenAI highlights experience with vulnerability management, attack path analysis, security automation, AI agents, vulnerability prioritization. Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the Enterprise Security Engineer, Vulnerability Management position at OpenAI?
This listing links directly to OpenAI's Ashby application page. You can apply directly on OpenAI's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.