Security Researcher, Security Products

Position Overview

Security Products is a new business unit on a mission to transform cybersecurity by leveraging AI to give defenders a decisive advantage. We’re building products that tackle some of the hardest, highest-impact problems in the field. We’re starting with tools that are already proving their value internally at OpenAI, helping to protect our own systems. We operate with speed, purpose, and a deep sense of responsibility, partnering across engineering, research, and security to deliver real-world impact.

As a Security Researcher on the Security Products team, you’ll play a key role in developing the science and methods that power our AI-powered cybersecurity products. You’ll work as part of a small team to develop security applications of LLMs to meaningful security problems and bring them to the world. This is a fast-moving, high-impact role where you’ll collaborate closely with security experts, AI researchers, and other engineers to integrate advanced AI capabilities into real-world security workflows while helping shape the product, technical foundation, and engineering culture.

Key Responsibilities

• Advancing the state of the art in applying LLMs/AI to real-world program analysis, vulnerability analysis, reverse engineering, and secure development problems.
• Designing experiments, benchmarks, and evaluation datasets to measure security efficacy, model robustness, and operator workflow impact.
• Building research prototypes and iterating them into reliable, secure, user-ready product capabilities.
• Partnering with internal and external researchers, teams, and design partners to understand high-value opportunities and use cases.
• Collecting and structuring security data (code, vulnerability data, logs, alerts) for performance benchmarking, model training, fine-tuning, and retrieval workflows.
• Developing and integrating model-driven detections, reasoning agents, and automated workflows into production systems and cloud environments.
• Contributing to team engineering culture, secure development practices, and responsible AI use in security contexts.
• Staying current on emerging threats, attacker tradecraft, and frontier AI techniques; translating insights into impact.

Required Qualifications

• 10+ years of relevant security research experience.
• Proficiency with program analysis techniques, tools, and technologies, including disassemblers (e.g. IDA Pro, Binary Ninja, Ghidra) and fuzzing.
• Proficiency with JavaScript, React, and other web technologies.
• Proficiency in one or more backend programming languages such as Python, Go, or similar.
• Experience with public cloud infrastructure (e.g. Azure, AWS) and orchestration frameworks (e.g. Kubernetes, Terraform).
• Deep understanding of security-related practices, such as secure coding, threat modeling, or detection systems.
• Interest in AI/ML (direct experience not required).
• Ability to move fast in an environment where things are sometimes loosely defined and may have competing priorities or deadlines.

Compensation

• Compensation: $325K – $490K + Offers Equity