Threat Detection and Response Engineering Manager

OpenAI

. Hire, coach, and develop security engineers .

Posted 11/12/2026full-timeUnited StatesMid-LevelSenior💰 $401,000 - $510,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security engineering teams, developing detection and investigation workflows, and applying AI models to enhance cyber defense. Proficient in building threat-informed roadmaps and fostering cross-functional partnerships to improve security outcomes.

Highest-signal resume keywords

Team ManagementAI FluencyThreat DetectionIncident ResponseTechnical Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Prototyping ToolsCode ReviewDetection DesignInvestigation WorkflowsAdversarial ValidationRegression TestingMonitoring PracticesTelemetry RequirementsContainment EffectivenessHuman Decision Points

Soft Skills

CoachingTechnical JudgmentCross-Functional CollaborationCommunicationProblem-Solving

Tools & Technologies

OpenAI ModelsKubernetesCloud InfrastructureEndpoint SecurityIdentity Management

Certifications & Qualifications

Active Full Scope Polygraph Clearance

Industry Keywords

Cyber DefenseThreat IntelligenceSecurity Incident Response TeamAdversary TradecraftForensic Data

Tech Stack

Tools & technologies

CloudKubernetes

About the role

Key responsibilities & impact

Hire, coach, and develop security engineers
Set technical direction, expectations, feedback processes, and technical leadership development
Build a team that rigorously reviews work and learns from missed detections and noisy signals
Set a threat-informed roadmap prioritizing risks to research, production services, datacenter infrastructure, devices, identities, and applications
Own detection and investigation workflows, including agent-driven triage and investigation
Surface likely threats warranting action and support the Security Incident Response Team (SIRT)
Build and test response and containment capabilities with infrastructure and system owners
Define human-approval requirements and verify containment effectiveness
Apply OpenAI models to threat hypotheses, detection authoring, testing, deployment, tuning, and workflow improvement
Prototype model-based defenses, evaluate them against realistic adversary behavior and analyst baselines, and move successful experiments into production
Translate adversary intelligence and incident findings into detection hypotheses
Define telemetry and forensic data requirements with Security Observability and infrastructure owners
Use replay, adversarial validation, regression testing, code review, staged rollout, monitoring, and rollback practices
Measure coverage, investigation accuracy, time to identify threats, and response effectiveness
Contribute investigative expertise during formal incidents led by SIRT

Requirements

What you’ll need

Experience managing security or software engineers
Demonstrated ability to hire, coach, develop technical judgment, and improve team delivery
Hands-on ability to prototype tools, write and review code, and guide complex detection, investigation, and response designs
Strong AI fluency and experience building systems that test how models or agents improve cyber defense
Experience evaluating real security workflows against meaningful baselines
Understanding of model failure modes, bounded permissions, and human decision points
Experience building or operating threat detections and leading technical investigations
Understanding of adversary tradecraft and assessment of evidence, scope, and uncertainty across complex environments
Understanding of identity, endpoint, cloud, Kubernetes, and infrastructure telemetry
Ability to reason about response and containment in unfamiliar systems
Experience using testing and operational feedback to improve security outcomes
Ability to explain tradeoffs among coverage, accuracy, speed, and human workload
Ability to build a focused roadmap and strong cross-functional partnerships
Willingness and ability to work from the US office three days per week
Active Full Scope Polygraph clearance (application form requirement)

Benefits

Comp & perks

Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents)
Paid medical and caregiver leave (up to 8 weeks)
Flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays
Multiple paid coordinated company office closures throughout the year for focus and recharge
Paid sick or safe time
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend
Daily meals in offices and meal delivery credits as eligible
Relocation support for eligible employees
Charitable donation matching and wellness stipends may be provided
Equity
Performance-related bonuses for eligible employees