Enterprise Security Engineer

Role Overview

As an Enterprise Security Engineer in OpenAI’s Security/IT environment, you will implement and manage the security of OpenAI’s internal information systems infrastructure and processes. You’ll work closely with IT and Security to build security capabilities, enforce policies, and monitor systems for threats.

Responsibilities

• Develop and implement security measures to protect company information assets from unauthorized access, disclosure, or misuse
• Monitor internal and external systems for security threats and respond to alerts
• Contribute to and enforce IT and Security policies and procedures
• Harden infrastructure and manage controls using enterprise tooling (e.g., AzureAD, GSuite, GitHub, and other SaaS)
• Advise employees on secure endpoint, office AV, and network practices
• Design data-sharing controls with monitoring, including Data Loss Prevention (DLP) and intelligent groups management
• Apply "secure by default" and zero trust approaches to protect knowledge workers and developers
• Identify and remediate vulnerabilities in internal systems using data security best practices
• Leverage OpenAI’s AI-driven models to improve security detection/response and data classification
• Educate employees on data security best practices
• Support endpoint and cloud security roadmaps by staying current on emerging threats and recommending improvements

Requirements

• Experience protecting and managing macOS fleets
• Experience deploying and managing endpoint security solutions (management frameworks, EDR tools)
• Experience with public cloud providers: AWS and/or Azure
• Identity & access management experience, including SAML, OAuth, and SCIM
• Email security protocol knowledge: SPF, DKIM, DMARC
• Intermediate/advanced scripting skills (e.g., Python, Bash)
• Knowledge of modern adversary tactics, techniques, and procedures (TTPs)
• Ability to collaborate, empathize, independently run projects, and prioritize risk reduction

Nice-to-haves

• Ability to create “secure by default” and zero-trust operating models for enterprise users and developers