Security Engineer, Detection and Response - EMEA

About the Team

At the core of OpenAI’s mission is a strong commitment to security, ensuring that artificial general intelligence positively impacts all of humanity. The Security team is dedicated to protecting OpenAI's technologies, personnel, and products by combining technical excellence with operational rigor. Their guiding principles emphasize impactful prioritization, enabling research, preparing for next-generation technologies, and fostering a strong security culture.

Role Overview

As a Security Engineer focusing on Detection and Response, you will safeguard OpenAI’s most critical assets, including intellectual property, customer information, and infrastructure. Your role involves building and managing systems designed to detect suspicious activities and respond swiftly and effectively. Collaboration with security teams and infrastructure stakeholders is crucial to define telemetry, create robust detection and response tooling, and prioritize automation where it yields high leverage.

Key Responsibilities

• Design and enhance detection and response systems spanning infrastructure, products, and research setups, focusing on high-quality detection and dependable operational response.
• Develop and maintain detection pipelines, including rule management, performance measurement for coverage and precision, tuning procedures, and secure deployment strategies.
• Automate investigation and response workflows to minimize manual effort in triage, data enrichment, containment, and evidence collection, reducing time to understanding and containment.
• Collaborate with other Security groups and system owners to ensure that new systems are equipped from inception with appropriate telemetry, threat models, and response playbooks.
• Identify and prioritize telemetry and control deficiencies across endpoints, identity services, SaaS, cloud, and Kubernetes platforms, advocating for improvements and implementing solutions when expedient.
• Address emerging security challenges in a cutting-edge AI research environment, particularly devising strategies to detect and respond to autonomous agents operating at scale across the infrastructure.

Preferred Qualifications

• Practical experience with threat detection and incident response, including crafting detection rules, handling investigations, and refining response playbooks.
• Deep knowledge of adversarial tactics, techniques, and procedures (TTPs) with the ability to translate these into actionable detection and response mechanisms.
• Strong threat modeling capabilities to assess new infrastructure or features, anticipate detection and response needs, and articulate concrete requirements.
• Expertise working in Kubernetes or containerized environments, including the creation of detections from cluster telemetry and understanding potential failure and attack vectors.
• Comfortable analyzing lower-level infrastructure and datacenter security risks like firmware/BMC exposure, network segmentation and telemetry, and complex control flows.
• Experience with major cloud platforms such as Azure, AWS, GCP, and OCI, and the capability to design detection strategies that transcend individual cloud providers.
• A passion for creating automation that alleviates repetitive detection and response tasks, balancing agent-driven workflows with the need for measurable, auditable, and secure outcomes.
• An enthusiasm for tackling novel challenges at the intersection of technology and security, including strategies for managing agents distributed across large-scale systems.
• Excellent communication skills enabling effective collaboration across diverse teams, transforming Detection & Response needs into clear alignments and actionable deliverables for both technical and non-technical stakeholders.
• Proficiency with scripting and leveraging AI or agent-based tools to accelerate investigations and automate workflows, favoring orchestration over manual operations.

About OpenAI

OpenAI is a pioneering AI research and deployment organization dedicated to ensuring that general-purpose artificial intelligence benefits everyone. The company advances AI capabilities while emphasizing safe deployment and ethical considerations, embracing diversity of perspectives globally.

Equal Employment Opportunity & Policies

OpenAI is committed to equal opportunity employment without discrimination based on race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or legally protected characteristics. Appropriate background checks will be performed consistent with local laws. Requests for reasonable accommodation for applicants with disabilities are supported.

Additional Information

Applicants with arrest or conviction records will be considered following applicable regulations, including regional Fair Chance ordinances. The position requires secure handling of computer hardware, maintaining confidentiality, and access to protected IT systems. For compliance concerns regarding job postings, reports can be submitted for review. OpenAI values the widespread benefits of AI and invites applicants to contribute to shaping future technology.