Technical Threat Investigator, Threat Intel Engineering
OpenAI · Remote · San Francisco · New York City · US - Remote ·
COMPENSATION
$347k – $510k
Listed on the employer's job board (Ashby)
- Fully remote (US/UK)
- Threat Intel & IR
- Build investigative tooling
- San Francisco visits
- Relocation assistance
Join the Threat Intelligence team at OpenAI to proactively identify and disrupt adversaries targeting the company’s systems and misusing its AI models. You will conduct complex investigations into threat actors, analyze their behavior and infrastructure, and translate findings into durable security improvements.
This deeply investigative role requires you to build lightweight tooling and AI-assisted workflows to scale analysis. You will partner with Security, Safety Systems, and Product Policy teams to operationalize insights and drive detection, enforcement, and safety outcomes across the organization.
What you'll do
- Conduct end-to-end investigations into sophisticated threat actors and model misuse
- Model attacker behavior to proactively hunt for and disrupt malicious activity
- Use internal telemetry, OSINT, and vendor data to produce high-confidence findings
- Translate investigative results into improvements for detection and safety pipelines
- Build scripts, automations, and agentic workflows to scale investigative throughput
- Prototype solutions for ambiguous problems like novel attacker behaviors
- Partner with Security and Product teams to operationalize findings
- Produce clear written outputs for technical and executive stakeholders
What you'll need
- Experience in threat intelligence, incident response, or offensive security
- Track record investigating sophisticated threat actors and platform abuse
- Strong understanding of adversary infrastructure, behavior, and tradecraft
- Ability to drive deep technical investigations from ambiguous signals to findings
- Experience using AI to accelerate or extend investigative workflows
- Strong scripting skills and comfort building lightweight automation tooling
- Ability to query and stitch together data from diverse systems and vendors
- Excellent communication skills for translating technical details for diverse audiences
- Comfort working independently in fast-moving, ambiguous problem spaces
How you'll work
- Remote role with collaboration across US and UK teams
- Regular in-person engagement at San Francisco headquarters expected
- Relocation assistance available for candidates moving to San Francisco