About the Role
ABOUT THE TEAM
OpenAI’s Cyber team works to make frontier AI safe, trusted, and transformative for developers and enterprises.
This team is building the security foundation for Codex: the native controls that govern what Codex can access and do, and the interfaces that allow customers and security partners to inspect, constrain, approve, and respond to Codex activity.
Our goal is to make Codex secure by default, governable by enterprises, and interoperable with the security products customers already trust. This extends the existing product direction around tenant-scoped tools, guarded actions, approval systems, and scalable partner interfaces.
ABOUT THE ROLE
We are looking for a deeply technical Product Manager to help build Codex security controls and the partner ecosystem around them.
This role focuses on securing Codex itself: how identity, permissions, tools, MCP servers, repositories, secrets, networks, and high-impact actions are governed across Codex products.
You will also help define standard interfaces through which authorized customer and partner systems can provide security context, inspect activity, return policy decisions, receive telemetry, and initiate bounded responses.
You will work closely with Codex product and engineering, OpenAI Security and Safety, enterprise customers, and partners across application security, identity, cloud security, data security, infrastructure, and security operations.
IN THIS ROLE YOU WILL
Build native security controls for Codex
Partner with engineering, design, security, and safety teams to develop controls for:
- Identity, roles, permissions, and tenant isolation.
- Access to repositories, files, tools, MCP servers, secrets, networks, and infrastructure.
- Read, write, execute, and deployment authority.
- Human and policy-based approvals.
- Prompt-injection and untrusted-content defenses.
- Audit trails, provenance, stop conditions, revocation, and rollback.
Help establish a graduated a