How to apply for Security Engineer, Infrastructure Security

About OpenAI

OpenAI is a frontier AI research and product company, dedicated to ensuring that artificial general intelligence benefits all of humanity. They are at the forefront of developing safe and aligned AI systems, with a strong emphasis on security and policy. Working here offers the unique opportunity to shape the future of AI while tackling some of the most challenging technical problems in the industry.

About the role

As a Security Engineer on the Infrastructure Security team, you will design and deploy security controls across OpenAI's GPU clusters, multi-cloud infrastructure, and critical AI systems. This role is pivotal in defending against sophisticated threats and protecting the foundational infrastructure that powers OpenAI's groundbreaking research. You will lead high-impact projects such as checkpoint encryption and network isolation, directly contributing to the security and reliability of cutting-edge AI systems.

A typical day

A typical day might start with reviewing security alerts and collaborating with infrastructure engineers to address potential vulnerabilities in the Kubernetes clusters. You could spend time designing a new checkpoint encryption mechanism, then meet with the research team to ensure security controls don't impede their workflows. Afternoons might involve writing code for security automation or conducting a security review of a new CI/CD pipeline.

Who OpenAI is looking for

• Deep security expertise with hands-on experience securing large-scale cloud environments (AWS, Azure) and on-premises datacenter infrastructure.
• Strong knowledge of container security, Kubernetes orchestration, and CI/CD pipeline security, with the ability to implement controls across these layers.
• Proven track record of leading complex security projects, such as encryption at scale, network isolation, and secrets management, in a high-stakes environment.
• Excellent analytical and communication skills, capable of collaborating with cross-functional teams and articulating security risks to both technical and non-technical stakeholders.

Tips for this application

• Tailor your resume to highlight specific projects where you designed or deployed security controls for GPU clusters, multi-cloud environments, or Kubernetes, quantifying the impact where possible.
• Research OpenAI's security research and engineering blog posts, and mention any relevant insights or innovations you've learned from them in your application.
• Demonstrate your familiarity with OpenAI's mission and the unique security challenges of AI infrastructure, such as protecting model weights and training data.
• Emphasize your experience with both cloud and on-premises security, as this role requires a hybrid skill set.
• In your cover letter, provide a concrete example of a security challenge you solved that is similar to checkpoint encryption or network isolation in a complex environment.

What to cover in your cover letter

['Highlight your experience with securing high-performance computing environments, such as GPU clusters, and your understanding of the unique threats to AI systems.', 'Showcase your ability to lead projects that involve encryption, secret management, and machine identity, with examples of successful outcomes.', "Express enthusiasm for OpenAI's mission and explain how your security expertise can contribute to their goal of safe and beneficial AI.", 'Mention your collaborative skills and your experience working with engineering teams to integrate security without hindering innovation.']

Research before applying

• Read OpenAI's security and safety blog posts to understand their security philosophy and current initiatives.
• Familiarize yourself with OpenAI's infrastructure stack by reviewing public talks or papers on their systems, such as their use of Kubernetes and cloud providers.
• Understand the broader AI security landscape, including threats like model extraction and adversarial attacks, and how they relate to infrastructure security.
• Research OpenAI's culture and values, as well as their approach to responsible AI, to align your application with their mission.

Likely interview topics

Based on the job description, expect questions about:

• How would you design a security control to protect model checkpoints during training and at rest?
• Describe your experience with network isolation in a multi-cloud or hybrid cloud environment. What challenges did you face?
• How do you approach secrets management in a Kubernetes environment at scale?
• What are the most critical security threats to AI infrastructure, and how would you mitigate them?
• Can you walk us through a time you led a security project that required balancing security with operational efficiency?

Common mistakes to avoid

• Avoid a generic resume that doesn't showcase your relevant experience with GPU clusters, Kubernetes, or multi-cloud security.
• Don't underestimate the importance of on-premises security knowledge; even if you're cloud-focused, be sure to highlight any datacenter or hardware-level experience.
• Avoid vague statements about your passion for AI security; instead, provide concrete examples of projects or research you've done in this area.