Security Engineer, Insider Threat Detection & Response

Security Engineer, Insider Threat Detection & Response

Posted 3 weeks ago, Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research  Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture.

As a Security Engineer you will join our OpenAI engineers and researchers in building, operating and securing transformational AI technologies. This role will focus on all aspects of Detection & Response but with a strong emphasis on detecting insider threats and influencing controls to safeguard OpenAI's most sensitive assets.

• Innovate on Detection and Response infrastructure to engineer and automate end-to-end detection and investigation workflows.
• Develop, measure, and tune detection rules to ensure effective and sustainable operations.
• Drive projects across OpenAI’s technology stack with a focus on insider threats, ranging from access abuse and intellectual property theft to novel risks emerging within AI infrastructure.
• Partner closely with cross-functional stakeholders, including HR, Legal, and peer investigative teams, providing technical expertise and evidence to support investigations.
• Collaborate on cutting-edge AI research, and use AI to improve OpenAI’s Security posture.

• 5+ years experience working in a detection/response or insider-risk role. We are seeking mid-level and senior candidates.
• You have broad familiarity with operating systems and platforms such as macOS, Windows, Linux, and Kubernetes, along with experience in cloud infrastructure.
• Knowledge of modern adversary tactics and attack paths, data exfiltration techniques, and have experience running and leading incidents.
• Proficiency with a scripting language (e.g. Python, Bash, Power Shell, or similar).
• Independently manage and run projects, balance preventative controls with user friction, and prioritize efforts for risk reduction.
• You’re motivated by securing transformative technology and can adapt familiar security frameworks to new risks in AI infrastructure.

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage;

return all computer hardware in your possession (including the…