Security Engineer, Detection and Response

Stack

Responsibilities

• ▹Build and evolve Detection & Response capabilities across infrastructure, products and research environments
• ▹Engineer detection pipelines and tooling: rule lifecycle management, measurement/quality loops, tuning and safe rollout
• ▹Automate response and investigations: triage, enrichment, containment and evidence capture
• ▹Partner with security teams and infrastructure owners to ensure new systems ship with the right telemetry and response playbooks
• ▹Define Detection & Response requirements across endpoints, identity, SaaS, cloud and Kubernetes
• ▹Evaluate and respond to emergent security concerns, such as detecting agents operating across infrastructure at scale

Requirements

• ▹Hands-on threat detection and/or incident response experience, including building detections and running investigations
• ▹Understanding of modern adversary tradecraft (TTPs) and ability to translate it into detection strategies
• ▹A threat modeling mindset, able to turn new infrastructure risks into concrete detection requirements
• ▹Experience in Kubernetes/containerized environments, including building detections from cluster telemetry
• ▹Experience across major cloud platforms (Azure, AWS, GCP, OCI), designing cloud-agnostic detection approaches
• ▹Comfortable with scripting and using AI/agent tooling to accelerate investigations and automation

Soft skills

About the company

OpenAI is an AI research and deployment company whose mission is to ensure that general-purpose artificial intelligence benefits all of humanity. The company pushes the boundaries of AI capabilities while placing safety and human needs at the core of its work, and operates as an equal opportunity employer.