Researcher, Automated Red Teaming

About The Team

Preparedness is a critical Safety Research team at OpenAI, focusing on mitigating AI threats to global security. Our Work Involves Measurement, Monitoring, and predicting the evolving capabilities of frontier AI systems. Mitigation involves keeping misuse safeguards, alignment tools, and security measures on track to adequately address extreme threats. Coordination is setting mitigation targets by maintaining OpenAI's preparedness framework and partnering with other staff to achieve these targets. This is urgent, fast-paced work with far-reaching implications for the company and society.

About The Role

This role leads the Automated Red Teaming (ART) effort: building scalable, research-driven systems that continuously uncover failure modes in our models and safeguards, and translating those findings into actionable, production-facing improvements. The goal is to reduce expected harm by finding the highest-leverage, least-covered weaknesses early and reliably. In this role, you own the research and technical direction for automated red teaming across catastrophic risk areas, with an initial emphasis on:

• Automated classifier jailbreak discovery (cyber and bio).
• Automated bio threat-development elicitation (worst-feasible planning uplift).
• CoT monitoring evasion probing (and adjacent loss-of-control evaluations).

You partner closely with: Vertical risk teams (Cyber, Bio, Loss of Control) to define threat models, prioritize targets, and land mitigations. The Classifiers team to turn discovered attacks into training data, evals, and measurable robustness gains. Product / Engineering / Safety stakeholders to ensure ART outputs are operationally useful. You might thrive in this role if you feel a strong pull toward AI safety, are motivated by reducing real-world catastrophic risk, love breaking systems (responsibly), have strong applied research instincts, are comfortable building scalable automation, can translate messy findings into action, and care about efficiency and prioritization.

Qualifications

Qualifications include: Experience in adversarial ML, security research / red teaming, abuse prevention systems, or large-scale eval infrastructure. Solid software engineering fundamentals, including data structures, algorithms, and testing discipline. Comfortable working in a production-adjacent environment. Thinking in threat models and incentives, asking "what would an attacker do next?" or "how would this fail under pressure?". Ability to translate findings into action, communicate clearly, and drive alignment on what to fix first. Care about efficiency and prioritization, and willing to say "no" to low-leverage work.

Skills

Skills include: Love breaking systems (responsibly), have strong applied research instincts, bring hands-on experience with LLMs and agents, and are comfortable building scalable automation.

Benefits

No specific benefits are mentioned in the job posting.

Pay

No specific pay details are provided in the job posting.

Schedule

No specific schedule details are provided in the job posting.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI's Affirmative Action and Equal Employment Opportunity Policy Statement.

Background Checks

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates.

OpenAI Global Applicant Privacy Policy

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link. OpenAI Global Applicant Privacy Policy At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.