Security Engineer, Insider Threat Detection & Response

About the Role

As a Security Engineer, you will build, operate, and secure transformational AI technologies with a focus on detecting insider threats and influencing controls to safeguard OpenAI's most sensitive assets.

In this role, you will:

• Innovate on Detection and Response infrastructure to engineer and automate end-to-end detection and investigation workflows.
• Develop, measure, and tune detection rules to ensure effective and sustainable operations.
• Drive projects across OpenAI’s technology stack with a focus on insider threats, ranging from access abuse and intellectual property theft to novel risks emerging within AI infrastructure.
• Partner closely with cross-functional stakeholders, including HR, Legal, and peer investigative teams, providing technical expertise and evidence to support investigations.
• Collaborate on cutting-edge AI research, and use AI to improve OpenAI’s Security posture.

You might thrive in this role if you:

• 5+ years experience working in a detection/response or insider-risk role. We are seeking mid-level and senior candidates.
• You have broad familiarity with operating systems and platforms such as macOS, Windows, Linux, and Kubernetes, along with experience in cloud infrastructure.
• Knowledge of modern adversary tactics and attack paths, data exfiltration techniques, and have experience running and leading incidents.
• Proficiency with a scripting language (e.g. Python, Bash, PowerShell, or similar).
• Independently manage and run projects, balance preventative controls with user friction, and prioritize efforts for risk reduction.
• You’re motivated by securing transformative technology and can adapt familiar security frameworks to new risks in AI infrastructure.