Security Engineer, Host Assurance

Stack

Responsibilities

• ▹Design, build, and operate components of the Host Assurance platform that establish trust in bare-metal hosts before they are eligible for production use
• ▹Help ensure hosts are verifiably trustworthy from delivery and installation through secure bootstrap
• ▹Build systems such as machine identity, certificate issuance and enrollment, HSM/key-management-backed trust services, host attestation, measurement, and baseline verification tooling
• ▹Validate delivered hardware and firmware against vendor claims, continuously detecting and managing drift over time
• ▹Eliminate insecure bootstrap patterns while preserving deployment throughput and operational reliability
• ▹Partner with provisioning, fleet, and orchestration teams to deliver paved paths where the secure approach is the easiest approach
• ▹Contribute code, reviews, operational improvements, and design guidance for foundational trust services
• ▹Help define observable, testable security properties for host platforms and improve related telemetry and validation
• ▹Participate in incident response, debugging, and post-incident improvements for security-critical infrastructure

Requirements

• ▹Strong software engineering experience building and operating reliable production systems at scale
• ▹Deep expertise in at least one relevant domain: PKI, HSMs, machine identity, applied cryptography, secure boot, firmware/hardware security, host attestation, or low-level platform security
• ▹Comfort working across systems boundaries, from services and APIs down to host, boot, firmware, or hardware-adjacent trust mechanisms
• ▹Ability to write production-quality code and reason clearly about failure modes, operational safety, and maintainability
• ▹Experience replacing fragile or manual security mechanisms with durable, paved-path infrastructure

Soft skills

What we offer

• ▹Preferably based in San Francisco or Seattle
• ▹Hybrid work model (3 days in office per week), relocation assistance

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. The company is an equal opportunity employer and does not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other legally protected characteristics.