Threat Detection and Response Engineering Manager (AI)

Location: San Francisco or US remote

Salary: $401K–$510K plus equity

Company

OpenAI is an AI research and deployment company developing and responsibly deploying general-purpose artificial intelligence.

What you will do

• Hire, coach, and develop security and software engineers while setting technical direction and rigorous review practices.
• Build a threat-informed roadmap covering frontier-model training and evaluation systems, inference services, datacenters, networks, devices, identities, and employee applications.
• Own detection and investigation workflows, including agent-driven triage, investigation, escalation to the Security Incident Response Team, and continuous improvement.
• Develop and test response and containment controls with infrastructure and system owners, defining human-approval requirements and verification methods.
• Apply OpenAI models to threat hypotheses, detection authoring and testing, deployment, tuning, investigation, and workflow evaluation.
• Establish telemetry, forensic-data, testing, rollout, monitoring, rollback, and measurement practices for reliable security outcomes.

Requirements

• Experience managing security or software engineers, including hiring, coaching, developing technical judgment, and improving team delivery.
• Hands-on ability to prototype tools, write and review code, and guide complex detection, investigation, and response designs.
• Strong AI fluency, including building and evaluating systems or agents that improve cyber defense against meaningful baselines.
• Understanding of model failure modes, bounded permissions, reliable workflows, and clear human decision points.
• Experience building or operating threat detections and leading technical investigations, with knowledge of adversary tradecraft, evidence, scope, and uncertainty.
• Understanding of identity, endpoint, cloud, Kubernetes, and infrastructure telemetry in investigations.
• Ability to design response and containment capabilities in unfamiliar systems and work with system owners.
• Experience using testing and operational feedback to improve coverage, accuracy, speed, and human workload.
• Ability to build focused roadmaps, establish cross-functional partnerships, and maintain dependable security operations in a rapidly changing environment.

Culture & Benefits

• Full-time employment based in San Francisco or remotely within the United States.
• Work focuses on protecting research, intellectual property, customer data, products, infrastructure, and emerging agent systems.
• Security Incident Response Team leads formal incident response; this team contributes investigative expertise and applies incident findings to improve detections.
• OpenAI is an equal opportunity employer and provides reasonable accommodations for applicants with disabilities.
• Background checks apply in accordance with applicable law for US-based candidates.