Software Security Architect, Operating Systems | Consumer Devices

Security Engineer · Senior · Full Time

San FranciscoUSD 268k – 342k4d ago
Apply for this role

Opens OpenAI's application page

Role

What you'll do.

Lead the security architecture for OpenAI's next-generation consumer operating system, defining trust models, privilege boundaries, and hardware-backed protections. This senior, hands-on role combines expertise in operating system internals, hardware security, and AI safety to build secure, privacy-preserving platforms that protect users, devices, and sensitive data. Work cross-functionally with hardware architects, firmware engineers, and product teams to establish foundational platform defenses and guardrails for AI applications.

Responsibilities

  • Define Operating System Security Architecture: Architect the security foundation for OpenAI's next-generation operating system, including trust boundaries, privilege models, and protection mechanisms for sensitive user data. Work to translate hardware capabilities and real-world product constraints into enforceable security policies that defend against emerging threats.
  • Integrate Hardware-Backed Security: Partner with hardware security architects to integrate roots of trust, secure elements, trusted execution environments (TEEs), and processor security capabilities into the operating system. Design the software-hardware interface to maximize security posture while maintaining performance.
  • Design Foundational Platform Defenses: Establish core security mechanisms including secure boot, code signing, device attestation, secure update mechanisms, cryptographic key protection, and device recovery procedures. Ensure these defenses work cohesively to prevent tampering and unauthorized access.
  • Establish Isolation and Access Controls: Design comprehensive isolation and access control policies across kernel, applications, system services, and AI workloads. Implement privilege separation, memory protection, process isolation, and enforced access boundaries to contain potential security breaches.
  • Define AI Agent Safety Guardrails: Establish architectural guardrails for how AI applications and agents access information, utilize device sensors and tools, manage sensitive context retention, and act on a user's behalf. Ensure AI systems operate within defined security and privacy boundaries.
  • Lead Threat Modeling and Architecture Reviews: Conduct comprehensive threat modeling exercises and security architecture reviews across the platform. Translate emerging threats and attack vectors into practical, enforceable architectural requirements and security improvements.
  • Prototype and Guide Implementation: Build proof-of-concept security solutions, review security-critical systems code, and guide engineering teams through complex technical and product security tradeoffs. Mentor engineers on secure coding practices and security architecture principles.

Qualifications

What we look for.

Technical

  • Operating System and Kernel Architecture

    Deep expertise designing or securing operating systems, kernels, embedded platforms, or hypervisors. Strong understanding of OS internals including memory protection mechanisms, process isolation models, executable loading procedures, device driver architecture, and privilege boundary enforcement.

  • Hardware Security Integration

    Proven experience building comprehensive security architectures spanning hardware, firmware, operating systems, applications, and cloud services. Ability to design systems that leverage hardware security features while maintaining software flexibility.

  • Systems Programming

    Ability to write and review security-critical systems code in C, C++, Rust, or comparable low-level languages. Deep understanding of secure development practices, exploit mitigation techniques, memory safety, and common vulnerability patterns in systems software.

  • Security Architecture Fundamentals

    Expertise in secure boot, code signing, device identity and provisioning, attestation mechanisms, trusted execution environments, and hardware-backed cryptographic key protection. Understanding of how these technologies work together to establish trust.

  • Threat Modeling and Security Analysis

    Ability to build rigorous threat models, assess security implications of architectural decisions, and communicate security tradeoffs clearly to technical and non-technical stakeholders. Experience influencing cross-functional engineering teams on security matters.

Education

  • Computer Science or Related Field

    Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related discipline. Advanced degree preferred but not required given extensive relevant industry experience.

Experience

  • Operating System Security Experience

    Minimum 8-10 years of professional experience in designing, implementing, or securing operating systems, kernels, hypervisors, or privileged systems software at scale.

  • Consumer Device Security

    Shipping security technologies for consumer-facing operating systems, mobile platforms (iOS, Android), or connected consumer devices. Experience bringing security architectures from concept through production deployment.

  • Hardware-Software Integration

    Demonstrated success integrating hardware security capabilities with software systems, including work with secure enclaves, TEEs, secure processors, and trust anchors.

  • Cross-Functional Collaboration

    Proven ability to work effectively across hardware, firmware, software, privacy, and product teams. Experience translating security requirements into practical implementations with real-world constraints.

Skills

Required

  • Operating System Internals

    Memory protection, virtual memory management, process isolation, executable loading, privilege levels, context switching, and inter-process communication mechanisms.

  • Systems Programming Languages

    C, C++, or Rust proficiency for writing and reviewing security-critical kernel and firmware code with deep understanding of low-level system interactions.

  • Security Architecture Design

    Designing end-to-end security architectures, defining trust models, establishing privilege boundaries, and creating defense-in-depth strategies across multiple system layers.

  • Threat Modeling

    Building comprehensive threat models, identifying attack surfaces, assessing vulnerabilities, and translating threats into architectural requirements and mitigations.

  • Secure Development Practices

    Understanding of common vulnerabilities in systems software, exploit mitigation techniques, secure coding principles, and security code review methodologies.

Preferred

  • Secure Boot and Code Signing

    Nice to have

    Hands-on experience implementing or architecting secure boot chains, code signing infrastructures, and verification mechanisms for embedded and consumer devices.

  • Trusted Execution Environments

    Nice to have

    Experience with TEE design, integration, and threat modeling (ARM TrustZone, Intel SGX, or comparable), including secure context isolation and trusted service invocation.

  • Kernel Hardening

    Nice to have

    Expertise in memory-safety mitigations (ASLR, DEP/NX, stack canaries), access control enforcement, exploit mitigations, and hardened kernel configurations.

  • Virtualization Security

    Nice to have

    Experience with hypervisor security, virtual machine isolation, virtualization-based security (VBS), and applying virtualization to strengthen security boundaries.

  • Device Attestation and Integrity

    Nice to have

    Experience designing device attestation mechanisms, remote attestation protocols, integrity verification, and device lifecycle security management.

  • AI Agent Security

    Nice to have

    Emerging experience in security architectures for AI systems, sensitive-context isolation, permissioned tool and API access control, prompt-injection resistance, and agent sandboxing.

  • Cryptography and Key Management

    Nice to have

    Strong understanding of cryptographic principles, key derivation, secure key storage, hardware key protection, and certificate-based identity management.

  • Mobile or Embedded Security

    Nice to have

    Production experience with iOS, Android, embedded Linux, or other consumer-facing embedded OS security implementations and compliance requirements.

Tech stack

Languages

C/C++RustAssembly

Frameworks

ARM TrustZoneVirtualization-Based SecuritySELinux/AppArmor

Tools

Threat Modeling ToolsDebugging and AnalysisCode AnalysisCryptography Libraries

Other

Hardware Security Module IntegrationSecure Update MechanismsDevice Attestation ProtocolsPrivacy-Preserving Architectures

Compensation

Pay and benefits.

Base·USD 268,000 – 342,000

Equity·Stock options

Benefits

  • Cutting-Edge AI and Hardware Integration

    Opportunity to work on groundbreaking consumer devices that combine advanced AI with next-generation hardware at scale, shaping how billions of users interact with AI.

  • Cross-Functional Technical Leadership

    Lead security architecture decisions across hardware, firmware, software, and AI teams. Influence product direction and technical strategy on matters of critical importance.

  • Impact on User Privacy and Safety

    Design security and privacy guardrails that directly protect users' personal agency, data, and trust. Build systems where security is a core feature, not an afterthought.

  • World-Class Technical Team

    Collaborate with exceptional researchers, systems engineers, hardware architects, and product leaders. Learn from and contribute to a team solving zero-to-one problems.

  • Responsible AI Development

    Contribute to OpenAI's mission of ensuring artificial general intelligence benefits all of humanity through security-first architecture and thoughtful AI agent governance.

  • Competitive Compensation Package

    Comprehensive salary, equity compensation, and benefits aligned with Silicon Valley standards for senior technical leadership roles at a high-impact AI company.

Process

Interview steps.

  1. 01

    Initial Screening

    Recruiter phone screen to assess background, operating system and security architecture experience, and alignment with OpenAI's mission. Discussion of career trajectory and interest in consumer devices and AI safety.

  2. 02

    Technical Architecture Discussion

    Technical interview with engineering leader or security architect to deep-dive into operating system internals, hardware-software security integration, and previous security architecture work. Expect discussion of threat modeling, privilege models, and real-world security tradeoffs.

  3. 03

    Security Architecture Deep Dive

    Interview with the hiring manager or lead architect focusing on designing security architectures end-to-end. May involve whiteboarding or discussing how to secure various attack surfaces, integrate TEEs, or establish trust models for consumer devices.

  4. 04

    Cross-Functional Collaboration

    Conversation with hardware security architect, firmware engineer, or privacy team member to assess ability to collaborate across disciplines, communicate security concepts, and navigate technical tradeoffs with non-security teams.

  5. 05

    Systems Code Review Exercise

    Technical exercise reviewing security-critical systems code (typically C/C++/Rust snippets) for vulnerabilities, architectural issues, and secure development practices. Assesses code review skills and security vulnerability knowledge.

  6. 06

    Leadership and Culture Fit

    Final conversation with senior leadership or team members assessing values alignment, ability to drive decisions with ambiguity, mentorship potential, and commitment to responsible AI development.

Full posting

Original listing.

About the Team

OpenAI Consumer Devices is building the next generation of products that bring powerful AI into people’s everyday lives. Guided by OpenAI’s mission to ensure AGI benefits all of humanity, our team combines world-class researchers, engineers, designers, and operators who care deeply about creating useful, intuitive, and responsible technology. You’ll have the opportunity to work alongside exceptional people on ambitious, zero-to-one challenges at the intersection of hardware, software, and AI. This is a chance to help define an entirely new category of products—and shape how people experience AI in the future.

The Operating Systems team is critical in this mission, turning sophisticated hardware and AI capabilities into a reliable, trusted platform. Security is central to that work: we define trust boundaries, integrate hardware-backed protections, isolate sensitive context, and establish the guardrails that let AI applications and agents act safely, privately, and under user control.

About the Role

We’re looking for a Software Security Architect to define the security architecture for OpenAI’s next-generation operating system. You’ll work alongside hardware security architects and partner with operating system, silicon, firmware, privacy, and product teams to protect users, their devices, and their data.

This is a senior, hands-on role for someone who can connect operating system internals, hardware-backed security, and real-world product constraints. Your work will shape the platform’s trust model, protect sensitive information, and set the technical foundations for AI that is safe, private, and under user control.

In this role, you will:

  • Define the operating system’s security architecture, trust boundaries, privilege model, and protections for sensitive user data.

  • Partner with hardware security architects to integrate roots of trust, secure elements, trusted execution environments, and processor security capabilities into the operating system.

  • Design foundational platform defenses, including secure boot, code signing, attestation, secure updates, key protection, and device recovery.

  • Establish isolation and access controls across the kernel, applications, system services, and AI workloads.

  • Define guardrails for how AI applications and agents access information, use sensors and tools, retain context, and act on a user’s behalf.

  • Lead threat modeling and architecture reviews across the platform, translating emerging threats into practical, enforceable requirements.

  • Prototype solutions, review security-critical systems code, and guide engineering teams through complex technical and product tradeoffs.

Minimum Qualifications:

  • Deep experience designing or securing operating systems, kernels, embedded platforms, hypervisors, or other privileged systems software.

  • Complex understanding of operating system internals, including memory protection, process isolation, executable loading, device drivers, and privilege boundaries.

  • Experience building security architectures that span hardware, firmware, operating systems, applications, and cloud services.

You might thrive in this role if you:

  • Bring practical expertise in secure boot, code signing, device identity, attestation, trusted execution, and hardware-backed key protection.

  • Can write or review systems code in C, C++, Rust, or comparable languages, with a strong grasp of secure development and exploit mitigation.

  • Build rigorous threat models, influence cross-functional engineering teams, and communicate security tradeoffs clearly.

  • Care deeply about user privacy, personal agency, and building systems that earn trust through their design.

Helpful experience:

  • Shipping security technologies for consumer operating systems, mobile platforms, or connected devices.

  • Kernel hardening, memory-safety mitigations, virtualization-based security, or secure enclave integration.

  • Security architecture for AI agents, sensitive-context isolation, permissioned tool use, or prompt-injection resistance.

  • Device provisioning, manufacturing security, secure recovery, or lifecycle security for hardware products.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. 

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.

For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link.

OpenAI Global Applicant Privacy Policy

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

Redirects to OpenAI's application page.

Other roles

More at OpenAI.

View all 111 roles