OpenAI
Technical Threat Investigator, Threat Intel Engineering
$347K–$510K
San Francisco +2 · Remote · Full-time · Posted Apr 30, 2026
- Location
- San Francisco
New York City
US - Remote
About the job
Investigate sophisticated threat actors and model misuse, then turn findings into scalable detection, disruption, enforcement, and safety improvements.
What you'll do
- Conduct end-to-end investigations and proactively hunt for malicious activity involving OpenAI’s models, products, and ecosystem.
- Build tooling, automations, and agentic workflows to scale investigations and improve detection, enforcement, intelligence, and safety pipelines.
- Partner across teams and communicate findings and recommendations to technical and executive stakeholders.
What they ask for
- Experience in threat intelligence, incident response, offensive security, or a closely related field.
- Experience investigating sophisticated threat actors and independently driving technical investigations to actionable findings.
- Strong scripting ability and experience building lightweight automation, investigative tooling, or workflows.
- Ability to use diverse system and vendor telemetry in investigations, including querying, extracting, and stitching together data.
Nice to have
- Experience using AI to extend or accelerate investigative workflows.
- Strong understanding of adversary behavior, infrastructure, and tradecraft.
Pay
$347K – $510K USD base salary
Tools
OSINT
AI focus
Investigate how threat actors integrate AI into their workflows and misuse OpenAI models; use AI to accelerate investigations and build AI-assisted, agentic workflows.
Model-written summary · the original posting is authoritative