The opportunity
Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity.
What you'll do
Run incident command from initial assessment through containment, recovery,: and closure, establishing severity, scope, response objectives, and escalation needs.
Assign work stream owners and coordinate investigation, containment, and: recovery in parallel. Maintain a decision log and distinguish confirmed facts from assumptions.
Drive timely containment and recovery decisions with the appropriate owners,: weighing security risk, evidence preservation, and operational impact within agreed decision rights.
Communicate incident status, impact, uncertainty, actions underway, and the: next update to technical and nontechnical stakeholders.
Manage cross-time-zone handoffs with explicit command ownership, current: status, outstanding risks, pending decisions, and next actions.
Improve response readiness through exercises, playbooks, and post-incident: reviews; track agreed corrective actions with their owners.
What they're looking for
- Partner with detection engineers to evaluate telemetry and detection quality,: close incident-related visibility gaps, and prioritize practical response automation.
- Have personally led complex security incidents as incident commander or an: equivalent response lead, with clear examples of decisions, delegation, escalation, and outcomes.
- Make sound decisions with incomplete information and revise them as evidence: changes, balancing containment urgency with operational impact.
- Coordinate responders across teams and time zones, resolve conflicting: priorities, and maintain clear ownership during handoffs.
