Systems Software Engineer, Security, First Party Hardware
AI research and deployment company building and deploying frontier AI products, including ChatGPT, Codex, and its API platform.
Projects
About OpenAI
OpenAI’s mission is to ensure artificial general intelligence benefits all of humanity. It consists of the nonprofit OpenAI Foundation and OpenAI Group, a public benefit corporation governed by the Foundation.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own the security foundation for OpenAI's first-party AI hardware, defining and delivering system-level device trust including boot integrity, device identity, provisioning, attestation, management-plane security, and firmware update and recovery. You'll turn threat models into requirements, implementation, and validation evidence supporting launch decisions.
Requirements
- 7+ years of hands-on experience in hardware, embedded, firmware, or platform security
- Experience shipping or securing real hardware platforms, BMCs, bootloaders, BIOS/UEFI, RTOS, or firmware update systems
- Deep familiarity with secure boot, measured boot, TPMs, roots of trust, attestation, key provisioning
- Strong applied cryptography judgment
- Ability to read and write C, C++, or Rust
- Comfort with SPI, I2C, SMBus, PCIe, UART, JTAG, SWD, GPIOs, TPMs
- Track record driving security improvements across teams
- Experience owning broad security programs end to end
- Clear written and verbal communication
- May need to meet legal status requirements under U.S. export control laws
Responsibilities
- Own security requirements, threat models, validation strategy, and launch-readiness evidence for hardware platforms
- Design and review secure boot, measured boot, roots of trust, firmware signing, recovery, and anti-rollback strategies
- Own device identity, provisioning, enrollment, attestation, certificate lifecycle, and key management
- Harden management interfaces across BMCs, hosts, accelerators, switches, including TLS/mTLS, Redfish, gNMI, SSH, syslog
- Drive security requirements for manufacturing, supply chain, signing, storage encryption, RMA, and decommissioning
- Build and drive validation for debug lockout, lifecycle transitions, update paths, and attestation
- Partner with vendors and contract manufacturers on security deliverables and launch gates
- Drive end-to-end closure including incident response
- Investigate hardware and firmware security issues and drive durable fixes
Benefits
- Equity
- Medical, dental, and vision insurance with HSA employer contributions
- Health FSA, Dependent Care FSA, and commuter pre-tax accounts
- 401(k) with employer match
- Paid parental leave (up to 24 weeks birth parents, 20 weeks non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
- Flexible PTO for exempt employees; up to 15 days for non-exempt
- 13+ paid company holidays and coordinated office closures, plus paid sick time
- Mental health and wellness support
- Employer-paid basic life and disability coverage
- Annual learning and development stipend
- Daily meals in offices and meal delivery credits
- Relocation support
- Performance-related bonus for eligible employees
- Charitable donation matching and wellness stipends
