Security Incident Response Team Manager
OpenAI · San Francisco
About this role
## About the Team Ensuring that advanced AI benefits humanity requires protecting the research, infrastructure, and trust that make its development and deployment possible. OpenAI Security defends model IP, people, products, and users against sophisticated adversaries across GPU supercomputing, multicloud environments, datacenters, and emerging agent systems. The Security Incident Response Team (SIRT) leads the response when those defenses are tested—establishing what happened, limiting harm, and strengthening our ability to protect frontier AI. ## About the Role We’re looking for a hands-on technical leader to build the incident response team that protects OpenAI as AI capabilities—and the threats surrounding them—evolve. You will command consequential incidents, lead technically demanding investigations, and make containment and recovery decisions when evidence is incomplete and the stakes are high. You’ll also shape how frontier models change incident response by using OpenAI’s own technology to help responders connect evidence, test hypotheses, and act effectively at a scale that manual workflows cannot support. You’ll partner with Research, Infrastructure, Product Security, Enterprise Security, IT, and Engineering to build exceptional responders, dependable AI-powered capabilities, and stronger defenses through every investigation. ## In This Role, You Will - **Hire, coach, and develop** exceptional incident responders combining investigative depth, engineering ability, and sound judgment. - **Lead incident command** for complex threats across OpenAI’s research, products, and infrastructure (severity/scope, investigation workstreams, containment options). - **Build and ship agentic capabilities** using OpenAI’s models for evidence collection, investigation context, response coordination, and bounded response workflows (with human approval for consequential actions). - **Set investigation standards** for sophisticated adversaries and insider threats across identity, endpoints, cloud, Kubernetes, and large-scale compute. - **Drive incidents to verified closure**, validating containment/recovery, documenting remaining risk, and tracking corrective actions. - **Coordinate across stakeholders** (engineering, infrastructure, legal, privacy, and others) and provide clear executive updates without overstating what evidence supports. - **Build sustainable on-call coverage**, escalation paths, and regional handoffs while balancing urgent response with training and planned improvements. - **Build readiness** into new research and infrastructure capabilities (playbooks, escalation paths, containment options, including agent scenarios at scale). - **Turn incident evidence into stronger defenses** with Detection Engineering, Threat Intelligence, Security Observability, and security platform teams. - **Prioritize improvements** using incident outcomes and readiness evidence; measure response quality and effectiveness and follow through on remediation. ## You Might Thrive If - You’re motivated by protecting frontier AI and want to understand how powerful systems can fail or be compromised. - You’ve managed security responders or a closely related technical operations team, with a track record of hiring, coaching, candid feedback, and growth. - You bring strong **AI fluency** and an **AI-first builder mindset**, with validated results and an understanding of failure modes. - You’re a hands-on builder with deep investigation expertise across i
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.