Security Engineer, Detection and Response
OpenAI· Security
San Francisco, New York City, Seattle, US - Remote$293k - $385kFull-timePosted 11mo ago
About the role
Security Engineer role focused on building and operating detection and response capabilities across OpenAI’s infrastructure, products, and research environments, with emphasis on high-signal detection, automation, and cross-team collaboration to protect sensitive assets.
Responsibilities
- Build and evolve Detection & Response capabilities across OpenAI’s infrastructure, products, and research environments, with an emphasis on high-signal detection and reliable operational response.
- Engineer detection pipelines and tooling: develop rule lifecycle management, measurement/quality loops (coverage, precision, latency), tuning processes, and safe rollout patterns.
- Automate response and investigations by building workflows that reduce toil (triage, enrichment, containment, evidence capture) and improve time-to-understand/time-to-contain.
- Partner with other Security teams and system/infrastructure owners across the company to ensure new systems ship with the right telemetry, threat models, and response playbooks from day one.
- Define D&R requirements and drive visibility across endpoints, identity, SaaS, cloud, Kubernetes: identify telemetry/control gaps, prioritize them, and advocate for fixes with partner teams (and implement directly when it’s the fastest/most effective path).
- Evaluate and respond to emergent security concerns in a frontier AI lab environment, such as detection and response strategies for agents operating across infrastructure at scale.
Qualifications
- Hands-on threat detection and/or incident response experience, including building detections, running investigations, and improving operational playbooks.
- Understanding of modern adversary tradecraft (TTPs) and ability to translate into practical detection strategies and response actions.
- Threat modeling mindset to evaluate new infrastructure or features and derive concrete requirements for shipping systems.
- Experience in Kubernetes/containerized environments, including building detections from cluster telemetry and understanding workloads, nodes, control plane, networking.
- Comfort reasoning about lower-level infrastructure and datacenter risks (firmware/BMC, network segmentation/telemetry, hard-to-observe control paths).
- Experience across major cloud platforms (Azure, AWS, GCP, OCI) and ability to design cloud-agnostic detection approaches.
- Ability to build automation to reduce repetitive D&R work, using agent-style workflows where appropriate, with measurable, auditable, safe outcomes.
- Strong communication and collaboration skills to translate D&R needs into requirements and drive follow-through across technical and non-technical audiences.
- Comfort with scripting and using AI/agent tooling to accelerate investigations and automation.
Skills
Required:Threat detectionIncident responseThreat modelingKubernetesCloud platformsAutomation/scripting
Benefits
- Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
- Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
- 401(k) retirement plan with employer match
- Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
- Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
- 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time
- Mental health and wellness support
- Employer-paid basic life and disability coverage
- Annual learning and development stipend
- Daily meals in offices, and meal delivery credits as eligible
- Relocation support for eligible employees
- Additional taxable fringe benefits (e.g., charitable donation matching and wellness stipends)
Last updated Sep 3, 2026. Interested? Apply on the company site.
About OpenAI
ai-infrastructure-and-developmentliquid-ai-recruiting-targetllmsetter-30setter-30-2026-q1speech-to-texttext-to-speechvoice-ai-stack
More open roles at OpenAI
- Head of First Party Chip Finance4d agoHybrid (San Francisco) · Strategic Finance
- Enterprise Security Engineer, Vulnerability Management4d agoHybrid (San Francisco), Hybrid (US - Remote) · Security
- Strategic Finance, Emerging B2B Products4d agoHybrid (San Francisco) · Strategic Finance
- Client Platform Engineer4d agoHybrid (San Francisco) · Security
- Compliance Program Manager — Regulatory Compliance4d agoHybrid (San Francisco) · Security