Security Engineer, Detection and Response

Highlights

• Protect OpenAI's IP, customer data and infrastructure powering frontier AI research.
• Build high-signal detection pipelines with quality loops for coverage and precision.
• Automate triage and containment to cut time-to-understand and time-to-contain.

What they offer

• Equity

Ideal candidate

Hands-on detection and response operator who thinks like an adversary and loves building automation that reduces toil. Collaborative, impact-driven, and energized by securing frontier AI and agent-driven infrastructure at scale.

Requirements

• Hands-on threat detection and/or incident response experience, including building detections, running investigations, and improving playbooks
• Understand modern adversary tradecraft (TTPs) and translate it into detection strategies and response actions
• Threat modeling mindset to evaluate new infrastructure and define detection and response requirements
• Experience working in Kubernetes/containerized environments including cluster telemetry and attack modes
• Comfortable reasoning about lower-level infrastructure and datacenter risks such as firmware/BMC and network telemetry
• Experience across major cloud platforms and ability to design cloud-agnostic detection approaches
• Build automation that replaces repetitive detection and response work with measurable, auditable outcomes
• Communicate clearly and collaborate well across teams to align stakeholders and drive follow-through
• Comfortable with scripting and using AI/agent tooling to accelerate investigations and automation