5 months ago
Base Salary
$266k - $445k/yr
Responsibilities
- Own security requirements, threat models, validation strategy, and launch-readiness evidence for first-party hardware platforms from design through production deployment.
- Design and review secure boot, measured boot, roots of trust, platform firmware resilience, firmware signing, recovery, and anti-rollback strategies.
- Own device identity, provisioning, enrollment, attestation, certificate lifecycle, and key-management requirements across manufacturing and data-center bring-up.
- Harden management interfaces and operational access paths across BMCs, hosts, accelerators, switches, and service tooling.
- Drive security requirements for manufacturing, supply chain, image signing, storage encryption, RMA, repair, and decommissioning.
- Build and drive validation for security-critical hardware and firmware behavior, including debug lockout, lifecycle transitions, update paths, attestation evidence, and recovery flows.
- Partner with vendors and contract manufacturers to deliver security requirements, test evidence, and launch gates.
- Drive closure across design, implementation, manufacturing readiness, deployment readiness, fleet operations, and incident response.
- Investigate hardware and firmware security issues, assess exploitability and operational risk, and drive durable fixes.
Requirements
- 7+ years of hands-on experience, or exceptional accomplishments demonstrating equivalent expertise, in hardware, embedded, firmware, platform, or low-level systems security.
- Experience shipping or securing hardware platforms, embedded devices, servers, accelerators, networking systems, BMCs, bootloaders, BIOS/UEFI, RTOS, kernels, or firmware update systems.
- Deep familiarity with secure boot, measured boot, TPMs, hardware roots of trust, device attestation, key provisioning, debug interfaces, firmware signing, recovery, or lifecycle-state design.
- Applied cryptography expertise for secure boot, attestation, TLS/mTLS, key storage, certificate lifecycle, storage encryption, and post-quantum readiness.
- Ability to read and write systems code in C, C++, or Rust for reviewing, prototyping, testing, or debugging security-critical behavior.
- Comfort with SPI, I2C, SMBus, PCIe, UART, JTAG, SWD, GPIOs, TPMs, and board-level debug tools.
- Track record of driving security improvements with hardware, firmware, infrastructure, manufacturing, operations, and partner teams.
- Experience owning broad, ambiguous security programs end to end and translating risk into technical requirements, validation plans, and engineering decisions.
- Strong written and verbal communication skills.
- Candidates may need to meet U.S. export-control legal-status requirements.
Benefits
- Hybrid work in San Francisco with 3 days per week onsite
- Relocation assistance available
About OpenAI
OpenAI builds and deploys large-scale AI models and tools—including ChatGPT, GPT-4–class models, DALL·E, and Whisper—sold via APIs and enterprise subscriptions to developers and businesses. It monetizes through usage-based API pricing and ChatGPT Plus/Team/Enterprise, and also reaches customers via Microsoft’s Azure OpenAI Service. Founded in 2015 and headquartered in San Francisco, it operates as a private partnership.