Security Incident Response Team Manager

Details

About the Team

OpenAI Security protects research, infrastructure, model intellectual property, people, products, and users against sophisticated adversaries across GPU supercomputing, multicloud environments, datacenters, and emerging agent systems. The Security Incident Response Team leads response efforts when those defenses are tested by establishing what happened, limiting harm, and strengthening protection for frontier AI.

About the Role

This role is for a hands-on technical leader who will build and manage the incident response team protecting OpenAI as AI capabilities and related threats evolve. The role involves commanding consequential incidents, leading technically demanding investigations, making containment and recovery decisions under uncertainty, and shaping AI-enabled incident response. The manager will partner with Research, Infrastructure, Product Security, Enterprise Security, IT, and Engineering to develop responders, AI-powered capabilities, and stronger defenses.

Responsibilities

• Hire, coach, and develop incident responders with investigative depth, engineering ability, and sound judgment.
• Lead incident command for complex threats affecting research, products, and infrastructure.
• Establish incident severity and scope, coordinate investigations, and evaluate containment options against exposure and operational disruption.
• Build and ship agentic capabilities using OpenAI models for evidence collection, investigation context, response coordination, and bounded response workflows.
• Partner with platform engineers to integrate tools and data, evaluate accuracy and failure modes, and ensure reliable, auditable operation with human approval for consequential actions.
• Set investigation standards for sophisticated adversaries and insider threats across identity, endpoints, cloud, Kubernetes, and large-scale compute.
• Drive incidents to verified closure by validating containment and recovery, documenting remaining risk, and tracking corrective actions.
• Coordinate with engineering, infrastructure, legal, privacy, and other stakeholders during incidents.
• Provide executives with clear updates on impact, uncertainty, decisions, and next steps.
• Build sustainable on-call coverage, escalation paths, and regional handoffs.
• Build readiness into new research and infrastructure capabilities, including scenarios involving agents operating across systems at scale.
• Turn incident evidence into stronger defenses with Detection Engineering, Threat Intelligence, Security Observability, and security platform teams.
• Prioritize improvements using incident outcomes and readiness evidence, while measuring response quality and effectiveness.

Requirements

• Experience managing security responders or a closely related technical operations team, including hiring, coaching, feedback, and employee development.
• Strong AI fluency and an AI-first builder mindset.
• Experience using models or agents to improve real investigation or response workflows, with validated results.
• Understanding of AI failure modes and experience pairing automation with rigorous evaluations and human judgment.
• Deep investigation expertise across identity, cloud, host, and infrastructure systems.
• Ability to prototype tools, write scripts or code, and coach responders through difficult evidence questions.
• Experience commanding consequential incidents involving capable adversaries and leading technical teams and senior stakeholders through verified recovery.
• Ability to make timely, defensible decisions with incomplete information and adapt as new evidence emerges.
• Clear communication skills with engineers, executives, legal partners, and privacy stakeholders.
• Experience improving on-call operations, response playbooks, or exercise programs.
• Ability to prioritize meaningful improvements, influence remediation owners, and follow through until outcomes are verified.

Benefits

• Medical, dental, and vision insurance, with employer contributions to Health Savings Accounts.
• Pre-tax accounts for health, dependent care, and commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental, medical, and caregiver leave.
• Paid time off, paid company holidays, office closures, and paid sick or safe time.
• Mental health and wellness support.
• Employer-paid basic life and disability coverage.
• Annual learning and development stipend.
• Daily office meals and eligible meal delivery credits.
• Relocation support for eligible employees.
• Additional benefits may include charitable donation matching and wellness stipends.

OpenAI is an equal opportunity employer and provides reasonable accommodations to applicants with disabilities. Background checks are administered in accordance with applicable law.