Software Security Architect, Operating Systems | Consumer Devices

The role

You will define the security architecture for OpenAI's next-generation operating system. You will work with hardware, firmware, and product teams to protect users, devices, and data.

What you will do

• Define the operating system's security architecture, trust boundaries, privilege model, and protections for sensitive user data.
• Partner with hardware security architects to integrate roots of trust, secure elements, trusted execution environments, and processor security capabilities.
• Design foundational platform defenses including secure boot, code signing, attestation, secure updates, key protection, and device recovery.
• Establish isolation and access controls across the kernel, applications, system services, and AI workloads.
• Define guardrails for how AI applications and agents access information, use sensors and tools, retain context, and act on a user's behalf.
• Lead threat modeling and architecture reviews across the platform.
• Prototype solutions, review security-critical systems code, and guide engineering teams through technical and product tradeoffs.

Required qualifications

• Deep experience designing or securing operating systems, kernels, embedded platforms, hypervisors, or other privileged systems software.
• Complex understanding of operating system internals, including memory protection, process isolation, executable loading, device drivers, and privilege boundaries.
• Experience building security architectures that span hardware, firmware, operating systems, applications, and cloud services.

Nice to have

• Practical expertise in secure boot, code signing, device identity, attestation, trusted execution, and hardware-backed key protection.
• Ability to write or review systems code in C, C++, Rust, or comparable languages.
• Strong grasp of secure development and exploit mitigation.
• Ability to build rigorous threat models and influence cross-functional engineering teams.
• Shipping security technologies for consumer operating systems, mobile platforms, or connected devices.
• Kernel hardening, memory-safety mitigations, virtualization-based security, or secure enclave integration.
• Security architecture for AI agents, sensitive-context isolation, permissioned tool use, or prompt-injection resistance.
• Device provisioning, manufacturing security, secure recovery, or lifecycle security for hardware products.

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. OpenAI Consumer Devices is building the next generation of products that bring powerful AI into people's everyday lives.