Technical Threat Investigator, Threat Intel Engineering
OpenAI· Security
Remote$347k - $510k + equityFull-timePosted 5mo ago
About the role
Investigator role focusing on deep, end-to-end investigations into sophisticated threat actors, with emphasis on model misuse and ecosystem abuse, to drive improvements in detection, enforcement, intel, and safety pipelines. Remote-friendly with collaboration across US/UK teams and occasional SF HQ engagement.
Responsibilities
- Conduct deep, end-to-end investigations into sophisticated threat actors interacting with OpenAI’s models, products, and broader ecosystem.
- Think like an adversary — model attacker behavior, anticipate misuse patterns, and proactively hunt for, identify, and disrupt malicious activity.
- Leverage internal telemetry, OSINT, vendor data, and in-house safety systems to produce high-confidence findings on adversarial use of our models in cyber operations, platform abuse, and threats targeting OpenAI.
- Translate investigative findings into concrete improvements across detection, enforcement, intel, and safety pipelines.
- Build tooling, scripts, automations, and agentic workflows that scale investigative throughput and reduce manual effort.
- Prototype solutions in ambiguous and emerging problem spaces, including new product surfaces, novel attacker behaviors, and areas where existing coverage may be limited.
- Partner closely with teams across Security, Safety Systems, Product Policy, and Integrity to operationalize findings and drive meaningful outcomes.
- Produce clear, high-signal written outputs and recommendations that inform decision-making across technical and executive stakeholders.
Qualifications
- Experience in threat intelligence, incident response, offensive security, or a closely related field.
- Solid experience investigating sophisticated threat actors, including model misuse, platform abuse, or other adversarial activity in complex environments.
- Strong understanding of adversary behavior, infrastructure, and tradecraft, and the ability to apply that understanding to proactive investigations.
- Demonstrated ability to independently drive deep technical investigations from ambiguous signals through to clear, actionable findings.
- Experience using AI to extend or accelerate investigative workflows.
- Strong scripting ability and comfort building lightweight automation, investigative tooling, or workflows that improve scale and repeatability.
- Strong ability to leverage telemetry from diverse systems and vendors to drive investigations, including directly querying, extracting, and stitching together data where needed.
- Strong written and verbal communication skills, especially the ability to translate technical investigations into high-signal outputs for diverse stakeholders.
- Comfort operating independently in ambiguous, fast-moving problem spaces with minimal oversight.
Skills
Required:Threat intelligenceInvestigationAdversary behavior modeling
Nice to have:AI-assisted investigative workflows
Benefits
- Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
- Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
- 401(k) retirement plan with employer match
- Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
- Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
- 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time
- Mental health and wellness support
- Employer-paid basic life and disability coverage
- Annual learning and development stipend
- Daily meals in our offices, and meal delivery credits as eligible
- Relocation support for eligible employees
- Additional taxable fringe benefits, such as charitable donation matching and wellness stipends
Last updated Sep 10, 2026. Interested? Apply on the company site.
About OpenAI
ai-infrastructure-and-developmentliquid-ai-recruiting-targetllmsetter-30setter-30-2026-q1speech-to-texttext-to-speechvoice-ai-stack
More open roles at OpenAI
- Head of First Party Chip Finance4d agoHybrid (San Francisco) · Strategic Finance
- Enterprise Security Engineer, Vulnerability Management4d agoHybrid (San Francisco), Hybrid (US - Remote) · Security
- Strategic Finance, Emerging B2B Products4d agoHybrid (San Francisco) · Strategic Finance
- Client Platform Engineer4d agoHybrid (San Francisco) · Security
- Compliance Program Manager — Regulatory Compliance4d agoHybrid (San Francisco) · Security