9 months ago
Base Salary
$266k - $385k/yr
Responsibilities
- Build and evolve Detection & Response capabilities across infrastructure, products, and research environments.
- Engineer detection pipelines and tooling, including rule lifecycle management, quality measurement, tuning, and safe rollout processes.
- Automate triage, enrichment, containment, investigations, and evidence capture to reduce operational toil.
- Partner with Security teams and infrastructure owners to define telemetry, threat models, response playbooks, and system requirements.
- Identify telemetry and control gaps across endpoints, identity, SaaS, cloud, and Kubernetes, and drive or implement fixes.
- Evaluate emerging security concerns, including detection and response strategies for agents operating across infrastructure at scale.
Requirements
- Hands-on threat detection and/or incident response experience, including building detections, conducting investigations, and improving operational playbooks.
- Knowledge of modern adversary tradecraft and the ability to translate it into detection strategies and response actions.
- Threat modeling experience and the ability to identify detection and response implications for new infrastructure or features.
- Experience with Kubernetes or containerized environments, including cluster telemetry and workload, node, control-plane, and networking risks.
- Understanding of lower-level infrastructure and datacenter risks, including firmware/BMC surfaces, network segmentation and telemetry, and difficult-to-observe control paths.
- Experience across major cloud platforms including Azure, AWS, GCP, and OCI, with the ability to design cloud-agnostic detection approaches.
- Ability to build measurable, auditable, and safe automation for Detection & Response workflows, including agent-style workflows where appropriate.
- Clear communication and cross-functional collaboration skills across technical and non-technical audiences.
- Comfort with scripting and using AI or agent tooling to accelerate investigations and automation.
Tech Stack
Categories
About OpenAI
OpenAI builds and deploys large-scale AI models and tools—including ChatGPT, GPT-4–class models, DALL·E, and Whisper—sold via APIs and enterprise subscriptions to developers and businesses. It monetizes through usage-based API pricing and ChatGPT Plus/Team/Enterprise, and also reaches customers via Microsoft’s Azure OpenAI Service. Founded in 2015 and headquartered in San Francisco, it operates as a private partnership.