Product Manager, Codex Security Controls & Partner Interfaces

requirements for authentication, authorization, customer consent, data minimization, latency, retries, failure behavior, auditability, and backwards compatibility. Ensure integrations use shared platform contracts rather than creating a different Codex architecture for every partner. Build the partner ecosystem Work directly with security vendors and enterprise design partners to turn the interfaces into production integrations. Create partner SDKs, reference implementations, technical documentation, test environments, conformance suites, and certification

requirements. Prioritize partners based on customer value, technical relevance, deployment readiness, and their ability to improve the shared platform—not simply logo value or launch timing. Turn lessons from individual partner engagements into reusable product capabilities. Shape the customer experience Define how enterprise administrators configure and understand Codex security controls, including: Policies by user, workspace, repository, environment, tool, or action. Approved security providers and permitted data sharing. Approval

requirements and time-limited exceptions. Policy inheritance and conflict resolution. Audit, investigation, and incident-response workflows. Ensure developers receive clear, actionable explanations when an action is blocked or requires approval, rather than an opaque policy error. Establish evaluation and launch gates Work with security, safety, research, and engineering teams to test whether controls work under realistic and adversarial conditions. Evaluate risks such as permission bypass, prompt injection, malicious tools, secret exposure, cross-tenant access, stale authorization, partner outages, conflicting decisions, and incomplete audit evidence. Help determine when new Codex capabilities have sufficient controls, reliability, and usability for broader deployment. You Might Thrive in This Role If You Have built enterprise security, developer-platform, infrastructure, or control-plane products. Understand identity, authorization, sandboxing, secrets, tool use, APIs, and audit systems. Think naturally in terms of trust boundaries, failure modes, and abuse paths. Can balance security, developer productivity, latency, reliability, and customer control. Have experience building integrations across complex enterprise systems or partner ecosystems. Can turn conflicting partner

requirements into a coherent platform. Communicate credibly with developers, security architects, CISOs, researchers, and partner product teams. Prefer measurable security outcomes and real adoption over demonstrations or integration announcements.

Nice to Have Experience in application security, identity, cloud security, data security, source control, CI/CD, SIEM, or enterprise governance. Familiarity with RBAC, ABAC, policy-as-code, OAuth, OIDC, workload identity, or secrets management. Experience with AI agents, MCP, sandboxed execution, prompt-injection defenses, or agent-security evaluations. Experience building SDKs, developer platforms, integration marketplaces, or certification programs. What Success Looks Like During your first six months, you will have helped establish: A clear roadmap for native Codex controls and partner-extensible controls. A common architecture for security context, policy decisions, inspection, telemetry, and response. Initial reference integrations with a focused group of partners. Evaluation and launch criteria for high-risk Codex capabilities. Baseline measures for control coverage, bypass resistance, latency, reliability, and developer experience. During your first year, you will have helped ship meaningful controls across sensitive Codex workflows, brought standardized partner interfaces into production use, and demonstrated that enterprises can grant Codex greater authority without sacrificing visibility, control, or accountability. About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence

benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement . Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations. To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form . No response will be provided to inquiries unrelated to job posting compliance. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link . OpenAI Global Applicant Privacy Policy At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.