Product Manager, Codex Security Controls & Partner Interfaces

Compensation

$293K – $385K

The base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. If the role is non-exempt, overtime pay will be provided consistent with applicable laws. In addition to the salary range listed above, total compensation also includes generous equity, performance-related bonus(es) for eligible employees, and the following benefits.

• Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
• Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
• 401(k) retirement plan with employer match
• Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
• Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
• 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
• Mental health and wellness support
• Employer-paid basic life and disability coverage
• Annual learning and development stipend to fuel your professional growth
• Daily meals in our offices, and meal delivery credits as eligible
• Relocation support for eligible employees
• Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided.

About the Team

OpenAI’s Cyber team works to make frontier AI safe, trusted, and transformative for developers and enterprises.

This team is building the security foundation for Codex: the native controls that govern what Codex can access and do, and the interfaces that allow customers and security partners to inspect, constrain, approve, and respond to Codex activity.

Our goal is to make Codex secure by default, governable by enterprises, and interoperable with the security products customers already trust. This extends the existing product direction around tenant-scoped tools, guarded actions, approval systems, and scalable partner interfaces.

About the Role

We are looking for a deeply technical Product Manager to help build Codex security controls and the partner ecosystem around them.

This role focuses on securing Codex itself: how identity, permissions, tools, MCP servers, repositories, secrets, networks, and high-impact actions are governed across Codex products.

You will also help define standard interfaces through which authorized customer and partner systems can provide security context, inspect activity, return policy decisions, receive telemetry, and initiate bounded responses.

You will work closely with Codex product and engineering, OpenAI Security and Safety, enterprise customers, and partners across application security, identity, cloud security, data security, infrastructure, and security operations.

In this Role you Will

Build native security controls for Codex

Partner with engineering, design, security, and safety teams to develop controls for:

• Identity, roles, permissions, and tenant isolation.
• Access to repositories, files, tools, MCP servers, secrets, networks, and infrastructure.
• Read, write, execute, and deployment authority.
• Human and policy-based approvals.
• Prompt-injection and untrusted-content defenses.
• Audit trails, provenance, stop conditions, revocation, and rollback.

Help establish a graduated authority model in which local, read-only, and reversible actions require less friction than actions involving production systems, credentials, sensitive data, or irreversible changes.

Define partner interfaces

Develop common, versioned interfaces that allow customer-selected security products to participate in Codex workflows.

These interfaces may support:

• Sharing trusted identity, task, resource, and environment context.
• Inspecting code, commands, artifacts, tool calls, or planned actions.
• Returning allow, deny, constrain, or require-approval decisions.
• Exporting normalized execution and security telemetry.
• Pausing activity, revoking access, or requiring reauthorization.

Define clear requirements for authentication, authorization, customer consent, data minimization, latency, retries, failure behavior, auditability, and backwards compatibility.

Ensure integrations use shared platform contracts rather than creating a different Codex architecture for every partner.

Build the partner ecosystem

Work directly with security vendors and enterprise design partners to turn the interfaces into production integrations.

Create partner SDKs, reference implementations, technical documentation, test environments, conformance suites, and certification requirements.

Prioritize partners based on customer value, technical relevance, deployment readiness, and their ability to improve the shared platform,not simply logo value or launch timing.

Turn lessons from individual partner engagements into reusable product capabilities.

Shape the customer experience

Define how enterprise administrators configure and understand Codex security controls, including:

• Policies by user, workspace, repository, environment, tool, or action.
• Approved security providers and permitted data sharing.
• Approval requirements and time-limited exceptions.
• Policy inheritance and conflict resolution.
• Audit, investigation, and incident-response workflows.

Ensure developers receive clear, actionable explanations when an action is blocked or requires approval, rather than an opaque policy error.

Establish evaluation and launch gates

Work with security, safety, research, and engineering teams to test whether controls work under realistic and adversarial conditions.

Evaluate risks such as permission bypass, prompt injection, malicious tools, secret exposure, cross-tenant access, stale authorization, partner outages, conflicting decisions, and incomplete audit evidence.

Help determine when new Codex capabilities have sufficient controls, reliability, and usability for broader deployment.

You Might Thrive in This Role If You

• Have built enterprise security, developer-platform, infrastructure, or control-plane products.
• Understand identity, authorization, sandboxing, secrets, tool use, APIs, and audit systems.
• Think naturally in terms of trust boundaries, failure modes, and abuse paths.
• Can balance security, developer productivity, latency, reliability, and customer control.
• Have experience building integrations across complex enterprise systems or partner ecosystems.
• Can turn conflicting partner requirements into a coherent platform.
• Communicate credibly with developers, security architects, CISOs, researchers, and partner product teams.
• Prefer measurable security outcomes and real adoption over demonstrations or integration announcements.

Nice to Have

• Experience in application security, identity, cloud security, data security, source control, CI/CD, SIEM, or enterprise governance.
• Familiarity with RBAC, ABAC, policy-as-code, OAuth, OIDC, workload identity, or secrets management.
• Experience with AI agents, MCP, sandboxed execution, prompt-injection defenses, or agent-security evaluations.
• Experience building SDKs, developer platforms, integration marketplaces, or certification programs.

What Success Looks Like

During your first six months, you will have helped establish:

• A clear roadmap for native Codex controls and partner-extensible controls.
• A common architecture for security context, policy decisions, inspection, telemetry, and response.
• Initial reference integrations with a focused group of partners.
• Evaluation and launch criteria for high-risk Codex capabilities.
• Baseline measures for control coverage, bypass resistance, latency, reliability, and developer experience.

During your first year, you will have helped ship meaningful controls across sensitive Codex workflows, brought standardized partner interfaces into production use, and demonstrated that enterprises can grant Codex greater authority without sacrificing visibility, control, or accountability.