Security Researcher, Codex Security
About The Position
About the Team: Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. Codex Security is OpenAI’s first security agent, built to scan GitHub Cloud repositories, validate real vulnerabilities, and integrate with Codex to help generate fixes. About the Role: Lead an effort to map, characterize, and prioritize cross-layer vulnerabilities in advanced AI systems – spanning data pipelines, training/inference runtimes, system and supply chain components. You’ll drive offensive research, produce technical deliverables, enhance the Codex Security product line, and serve as OpenAI’s primary technical counterpart for select external partners (including potential U.S. government stakeholders).
Requirements
- Have strong experience in vulnerability research, exploit development, or offensive security.
- Have deep experience with cutting edge offensive-security techniques
- Are fluent across AI/ML infrastructure (data, training, inference, schedulers, accelerators) and can threat-model end-to-end.
- Operate independently, align diverse teams, and deliver on tight timelines.
- Communicate clearly and concisely with experts and decision-makers.
- Care deeply about improving the security of widely used software and open-source infrastructure.
- Are a strong developer who can work in a small energetic team
Responsibilities
- Conduct deep security research on real-world software systems to discover complex vulnerabilities across large codebases and distributed architectures.
- Investigate and validate vulnerabilities discovered by AI-driven security agents, including building proofs-of-concept and exploit demonstrations.
- Partner with engineering teams to improve automated vulnerability discovery, validation, and remediation workflows as part of product development.
- Build high quality security datasets and evals that will help advance model’s cybersecurity capabilities
- Train and improve AI models used for vulnerability discovery, validation, and automated remediation by developing datasets, evaluations, and feedback loops grounded in real-world security research.
- Publish technical writeups, research insights, and vulnerability analyses that advance the state of application security.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
