Product Manager, Cyber Defense and Blue Team

Responsibilities

• Work with security practitioners to understand high-value defensive workflows, recurring pain points, and opportunities for AI to materially improve outcomes.
• Shape and build products from early concept through prototype, evaluation, launch, and ongoing iteration.
• Translate complex security and model capabilities into clear product requirements and intuitive user experiences.
• Partner with research and engineering teams to connect model improvements with real product use cases.
• Collaborate with OpenAI’s internal Detection & Response team to learn from real operational needs and develop reusable capabilities.
• Develop Codex-based workflows that allow defenders to investigate, create, test, and improve security content using the tools they already trust.
• Work with security vendors and customers on integrations, design partnerships, and early deployments.
• Define practical measures of product quality, including accuracy, usefulness, safety, adoption, and improvements in analyst efficiency.
• Establish appropriate safeguards for permissions, approvals, auditability, tenant isolation, and high-impact security actions.
• Support product launches, technical demonstrations, customer engagements, and practitioner-focused content.
• Turn lessons from individual engagements into repeatable products, playbooks, and platform capabilities.

Requirements

• Experience building enterprise, developer, infrastructure, or cybersecurity products.
• Excited by zero-to-one product development and comfortable working in areas where the product, market, and technology are still evolving.
• Understand how to move from a compelling technical capability to a product that users can depend on.
• Can work effectively with researchers, engineers, designers, security practitioners, and commercial teams.
• Strong product judgment and can balance user value, technical feasibility, safety, and speed.
• Comfortable working directly with customers and partners to learn, prototype, and iterate.
• Can make complex technical systems understandable without oversimplifying them.
• Care deeply about building products that are measurable, trustworthy, and useful in real operational environments.
• Willing to operate at multiple levels—from product direction and roadmap discussions to detailed workflow design and launch execution.

Nice-to-Haves

• Experience with security operations, detection and response, threat intelligence, identity security, endpoint security, or security analytics.
• Familiarity with products such as SIEM, EDR, XDR, SOAR, network security, identity platforms, or security validation tools.
• Experience building AI products, agentic systems, developer tools, or enterprise integrations.
• Familiarity with model evaluations, benchmark design, or human-in-the-loop product workflows.
• Experience building partner ecosystems, APIs, connectors, or platform products.
• A history of working closely with technical or practitioner communities.

Initial Areas of Focus

• Detection engineering and detection-content development
• Threat hunting and investigation
• Security validation and control testing
• AI-agent and MCP runtime defense
• Integrations with security platforms and enterprise workflows
• Safe, governed assistance for incident response