Technical Threat Investigator, Threat Intel Engineering - UK

Responsibilities

• ▹Conduct deep, end-to-end investigations into sophisticated threat actors interacting with OpenAI's models, products, and ecosystem
• ▹Model attacker behavior, anticipate misuse patterns, and proactively hunt for and disrupt malicious activity
• ▹Leverage internal telemetry, OSINT, vendor data, and in-house safety systems to produce high-confidence findings
• ▹Translate investigative findings into concrete improvements across detection, enforcement, and safety pipelines
• ▹Build tooling, scripts, automations, and agentic workflows that scale investigative throughput
• ▹Prototype solutions in ambiguous and emerging problem spaces
• ▹Partner closely with Security, Safety Systems, Product Policy, and Integrity teams
• ▹Produce clear, high-signal written outputs for technical and executive stakeholders

Requirements

• ▹Experience in threat intelligence, incident response, offensive security, or a closely related field
• ▹Solid experience investigating sophisticated threat actors, including model misuse and platform abuse
• ▹Strong understanding of adversary behavior, infrastructure, and tradecraft
• ▹Demonstrated ability to independently drive deep technical investigations from ambiguous signals to clear findings
• ▹Experience using AI to extend or accelerate investigative workflows
• ▹Strong scripting ability and comfort building lightweight automation and investigative tooling
• ▹Strong ability to leverage telemetry from diverse systems and vendors
• ▹Strong written and verbal communication skills

Soft skills

What we offer

• ▹Relocation assistance for candidates relocating to San Francisco
• ▹Remote role with regular in-person engagement at SF headquarters

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity.