Product Manager, Codex Security Controls & Partner Interfaces

Responsibilities

• Build native security controls for Codex, including governance of identity, roles, permissions, tenant isolation, access to repositories/files/tools/MCP servers/secrets/networks/infrastructure, read/write/execute/deployment authority, human and policy-based approvals, prompt-injection and untrusted-content defenses, audit trails, provenance, stop conditions, revocation, and rollback.
• Help establish a graduated authority model where local, read-only, and reversible actions require less friction than high-impact actions.
• Define partner interfaces for sharing context, inspecting activity, returning policy decisions, exporting telemetry, and initiating responses, with clear requirements for auth, authorization, consent, data minimization, latency, retries, failure behavior, auditability, and backwards compatibility.
• Ensure integrations use shared platform contracts.
• Build the partner ecosystem by working with security vendors and enterprise design partners to create production integrations, partner SDKs, reference implementations, technical documentation, test environments, conformance suites, and certification requirements.
• Prioritize partners based on customer value, technical relevance, and platform improvement.
• Turn partner lessons into reusable product capabilities.
• Shape the customer experience for enterprise administrators configuring policies, approved providers, approvals, policy inheritance, audit/investigation workflows; ensure clear explanations for developers on blocked actions.
• Establish evaluation and launch gates with security, safety, research, and engineering teams to test controls under realistic and adversarial conditions, evaluating risks like permission bypass, prompt injection, etc.
• Determine when new Codex capabilities have sufficient controls for deployment.

Requirements

• Experience building enterprise security, developer-platform, infrastructure, or control-plane products.
• Understanding of identity, authorization, sandboxing, secrets, tool use, APIs, and audit systems.
• Ability to think in terms of trust boundaries, failure modes, and abuse paths.
• Balance security, developer productivity, latency, reliability, and customer control.
• Experience building integrations across complex enterprise systems or partner ecosystems.
• Ability to turn conflicting partner requirements into a coherent platform.
• Credible communication with developers, security architects, CISOs, researchers, and partner product teams.
• Preference for measurable security outcomes and real adoption.

Nice-to-Haves

• Experience in application security, identity, cloud security, data security, source control, CI/CD, SIEM, or enterprise governance.
• Familiarity with RBAC, ABAC, policy-as-code, OAuth, OIDC, workload identity, or secrets management.
• Experience with AI agents, MCP, sandboxed execution, prompt-injection defenses, or agent-security evaluations.
• Experience building SDKs, developer platforms, integration marketplaces, or certification programs.

Compensation

Total compensation range: $293,000 - $385,000 USD.