Global Detection and Response Lead Job at OpenAI (San Francisco)

Job Description

We are seeking a Global Detection and Response Lead to own and scale OpenAI’s cybersecurity detection and response operations. In this role, you will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvements across our global infrastructure. You will be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor high-performing teams, partner closely with Infrastructure, Research, Product Security, Enterprise Security, IT, and Engineering, and ensure that detection and response capabilities are embedded by design into the systems that power OpenAI. This is a strategic and practical leadership role requiring deep technical credibility, operational rigor, and the ability to build high-performing teams in a fast-moving environment.

Job Responsibility

Oversee global detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure
Lead, mentor, and directly manage several small teams of senior engineers across observability, detection and response, and threat intelligence
Hire and scale these functions deliberately and proportionately as OpenAI’s compute footprint and platform ambitions grow
Ensure world-class operational rigor and readiness through management of incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed
Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments
Deeply partner across all of OpenAI to evaluate and respond to emergent security concerns in a frontier AI lab environment, such as detection and response strategies for agents operating across infrastructure at scale
Build a world-class security program capable of withstanding tier-1 adversaries by maximally embracing our own models to solve frontier security problems

Requirements

10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations
Active U.S. Government security clearance (Top Secret) or willingness and eligibility to obtain one
Mission-oriented, have unimpeachable integrity, and are passionate and motivated to detect and respond to adversaries in a highly complex, fast-paced environment
Deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams across a global footprint, including airgapped and sovereign environments
Stellar leadership skills, and a demonstrated history of driving durable, and continuous improvements to programs, processes, and people
Exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority
Deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives
Understand modern adversary tradecraft (TTPs) and have demonstrated experience and expertise translating it into practical detection strategies and response actions

What we offer

Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend to fuel your professional growth
Daily meals in our offices, and meal delivery credits as eligible
Relocation support for eligible employees
Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided
Offers Equity
Performance-related bonus(es) for eligible employees

OpenAI - All Job Offers

Select Country

Global Detection and Response Lead

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Global Detection and Response Lead

Incident Response Lead - Global Security

Cybersecurity Manager - Detection and Response

Senior Information Security Incident Response Lead

Cyber Security Incident Response Lead

Vuln and Exposure Response Manager

Global Head of Cyber Risk and Compliance

Information Security Manager

Incident Response Manager

Our AI answers in your language