← Back to jobs

Researcher, Frontier Cybersecurity Risks

openai

San Francisco
Information Security

Job Score

80 pts
On-site model (+70) Information Security (+10)

About the team

​​Preparedness is a critical Safety Research team at OpenAI, which is focused on mitigating AI threats to global security that could scale to an extreme level of severity.

Our work involves:

  1. Measurement. Monitoring and predicting the evolving capabilities of frontier AI systems.

  2. Mitigation. Keeping misuse safeguards, alignment tools, and security measures on track to adequately address extreme threats that might arise in the future.

  3. Coordination. Setting mitigation targets by maintaining OpenAI’s preparedness framework, and partnering with other staff to achieve these targets.

This is urgent, fast-paced work that has far-reaching implications for the company and for society.

 

About the role

Models are becoming increasingly capable—moving from tools that assist humans to agents that can plan, execute, and adapt in the real world. As we push toward AGI, cybersecurity becomes one of the most important and urgent frontiers: the same systems that can accelerate productivity can also accelerate exploitation.

As a Researcher for cybersecurity risks, you will help design and implement an end-to-end mitigation stack to reduce severe cyber misuse across OpenAI’s products. This role requires strong technical depth and close cross-functional collaboration to ensure safeguards are enforceable, scalable, and effective. You’ll contribute directly to building protections that remain robust as products, model capabilities, and attacker behaviors evolve.

 

In this role, you will:

  • Design and implement mitigation components for model-enabled cybersecurity misuse—spanning prevention, monitoring, detection, and enforcement—under the guidance of senior technical and risk leadership.

  • Integrate safeguards across product surfaces in partnership with product and engineering teams, helping ensure protections are consistent, low-latency, and scale with usage and new model capabilities.

  • Evaluate technical trade-offs within the cybersecurity risk domain (coverage, latency, model utility, and user privacy) and propose pragmatic, testable solutions.

  • Collaborate closely with risk and threat modeling partners to align mitigation design with anticipated attacker behaviors and high-impact misuse scenarios.

  • Execute rigorous testing and red-teaming workflows, helping stress-test the mitigation stack against evolving threats (e.g., novel exploits, tool-use chains, automated attack workflows) and across different product surfaces—then iterate based on findings.

 

You might thrive in this role if you:

  • Have a passion for AI safety and are motivated to make cutting-edge AI models safer for real-world use.

  • Bring demonstrated experience in deep learning and transformer models.

  • Are proficient with frameworks such as PyTorch or TensorFlow.

  • Possess a strong foundation in data structures, algorithms, and software engineering principles.

  • Are familiar with methods for training and fine-tuning large language models, including distillation, supervised fine-tuning, and policy optimization.

  • Excel at working collaboratively with cross-functional teams across research, security, policy, product, and engineering.

  • Have significant experience designing and deploying technical safeguards for abuse prevention, detection, and enforcement at scale.

  • (Nice to have) Bring background knowledge in cybersecurity or adjacent fields.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. 

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.

For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link.

OpenAI Global Applicant Privacy Policy

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About Information Security

The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.

Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.

Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Content Manager

The Content Manager is the professional responsible for leading the entire content strategy, production, and management of an organization. They define the editorial strategy, coordinate writing teams, and ensure content aligns with business goals and brand identity.

Key skills include content strategy, editorial planning, content audit, buyer persona, customer journey, content ops, content governance, performance metrics (ROI, engagement, organic traffic), and team management. Knowledge of WordPress, Contentful, Notion, and analytics tools is a differentiator.

Content Managers in technology companies are highly valued, especially those who can align content with conversion funnels, lead multidisciplinary teams, and use data to optimize editorial strategy. The field offers opportunities from content manager to head of content, with a focus on strategy, quality, and scale.

About Content

The Content and Social Media area is essential for building digital presence and audience engagement. Professionals create content strategies, manage social networks, and develop impactful brand narratives.

Key skills include copywriting, storytelling, community management, metrics analysis, audiovisual production, and knowledge of each platform algorithms.

With the growth of influencer marketing and social commerce, this area continues to generate new career opportunities.

About Office Suite

Proficiency in Office Suite is an essential skill for professionals across various areas. Microsoft Excel, Word, PowerPoint, and Outlook are fundamental tools in the corporate day-to-day, while Google Workspace and other collaborative solutions are gaining increasing space.

Key skills include advanced Excel (formulas, pivot tables, Power Query, VBA/Macros), Word (formatting, mail merge, styles), PowerPoint (presentation design, animations), Outlook (email and calendar management), and collaborative tools like Google Sheets, Notion, and Airtable.

Professionals with advanced Office Suite proficiency are valued in administrative, financial, data, and operational areas. Microsoft Office Specialist (MOS) certifications are important differentiators. The combination of advanced Excel with data analysis skills is one of the most in-demand competencies in the market.

About Automation Engineer

The Automation Engineer is the professional responsible for designing, developing, and implementing solutions that automate manual and repetitive processes in IT, infrastructure, testing, and operations. They combine programming knowledge with DevOps and SRE vision to eliminate manual tasks and increase operational efficiency.

Key skills include Infrastructure as Code (Terraform, Ansible, Pulumi), CI/CD (Jenkins, GitHub Actions, GitLab CI), test automation (Selenium, Cypress, Playwright), network automation (Netconf, SDN), RPA (UiPath, Power Automate), and scripting (Python, Bash, PowerShell). Knowledge of Kubernetes, GitOps (ArgoCD, Flux), and automation platforms is a differentiator.

Automation Engineers in technology companies are highly valued, especially those who can create automated deployment pipelines, self-healing infrastructure, and internal developer platforms (IDP). The field offers opportunities from junior automation engineer to automation architect and head of automation.

About Public Relations

The Public Relations (PR) area focuses on managing the reputation, image, and communication of an organization with its various stakeholders (such as clients, investors, employees, media, and the community). PR professionals develop corporate communication strategies, manage media relations (press relations), organize institutional events, and work in image crisis prevention and management.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

Generative Design and AI as a Co-pilot

If the last decade in digital design was defined by mobile standardization and UX/UI becoming the core of product development, 2026 marks the dawn of a new era. We are no longer designing just for flat glass screens; we are building intelligent ecosystems, three-dimensional environments, and autonomous algorithms.

For designers looking to stand out and secure the best six-figure remote opportunities in the US tech market, understanding where the industry is heading is no longer a "nice-to-have" differential—it's a matter of professional survival. Below, we break down the four major trends that will dictate hiring and compensation in the 2026 design landscape.

1. Generative Design and AI as a Co-pilot (Not a Replacement)

The fear of Artificial Intelligence replacing designers is officially in the past. In 2026, generative AI is deeply and natively integrated into industry-standard tools like Figma, Adobe, and Framer. The most valued skill by top-tier tech companies is no longer speed in aligning components, but rather algorithmic art direction and prompt design.

  • UI Automation: Wireframing, component variations, and complex design systems can now be generated with a few text prompts.
  • The Designer's New Role: Professionals are shifting from operational executors to curators and strategists, ensuring that AI-generated outputs align with user psychology and core business objectives.

2. Spatial Design and Spatial Computing

With the maturation of mixed reality devices (such as the Apple Vision Pro and Meta's advanced lineups), Spatial Design has evolved from an experimental niche to a mandatory department in Big Tech and forward-thinking startups.

Designing for spatial computing requires a complete paradigm shift: designers must understand Z-axis depth, visual ergonomics, spatial audio, and interactions based on eye-tracking and hand gestures. Roles like AR/VR Product Designer and 3D Interaction Designer are seeing an exponential jump in job listings, often paired with premium compensation packages.

3. Conversation Design and Invisible Interfaces (Zero-UI)

Driven by the omnipresence of Large Language Models (LLMs), the way users interact with systems has fundamentally changed. In 2026, many of the best interfaces don't rely on buttons or hamburger menus; they are conversational. UX Writing and Conversation Design have taken center stage.

  • The Challenge: How do you design the "personality" and flow of a virtual assistant so it feels natural, empathetic, and on-brand, rather than like a rigid robot?
  • The Opportunity: Designers who know how to map complex decision trees, create logical flows for voice and text, and train the empathy of AI models are being heavily scouted by top US startups.

4. Digital Sustainability and Eco-Design

The ESG (Environmental, Social, and Governance) agenda has finally reached the product design tables. The internet consumes a massive amount of energy, and in 2026, tech companies are being strictly held accountable for their digital carbon footprint.

Enter the demand for Digital Eco-Design. This involves creating lighter interfaces, optimizing user flows to reduce screen time (saving battery life and server processing power), and adopting color palettes and assets (like SVGs instead of heavy raster images) that require less energy to render. Being a sustainable designer has become a powerful B2B selling point for agencies and freelancers alike.

Conclusion: The Evolution of Talent

The 2026 design market is highly rewarding for those who embrace complexity. The barrier to entry for making "pretty screens" has dropped significantly, but the demand for professionals who can solve intricate business problems through empathy, strategy, and the mastery of new technologies has never been higher.

If you want to stay ahead of the curve and get direct access to the remote jobs that are actively looking for these specific skills, make sure to follow Mondywork's daily curation. The future of design is hybrid, remote, and full of opportunities.