Technical Threat Investigator, Threat Intel Engineering

Written by the T&S Network from OpenAI's posting.

Investigates sophisticated threat actors who target OpenAI or misuse its models, including adversarial use of models in cyber operations, platform abuse, and threats aimed at the company. Sits in the Threat Intelligence team, which proactively identifies and disrupts adversaries and turns findings into security strategy and leadership intelligence.

What you'd do

• Run end-to-end investigations into capable threat actors, covering behavior, infrastructure, emerging techniques, and AI use in their workflows.
• Model attacker behavior and hunt for malicious activity before it surfaces through normal detection.
• Combine internal logs, open-source research, vendor feeds, and in-house safety tools to reach firm conclusions.
• Turn investigative findings into detection, enforcement, intel, and safety pipeline improvements.
• Build small tools, scripts, and AI agent pipelines that let investigations run at higher volume.
• Prototype solutions for new product surfaces and novel attacker behaviors where coverage is limited.

What it asks for

• Track record investigating advanced threat actors, including misuse of models or abuse of platforms.
• Working knowledge of how adversaries operate, what infrastructure they use, and their tradecraft.
• Ability to drive technical investigations independently from ambiguous signals to actionable findings.
• Strong scripting ability and comfort building automation and investigative tooling.
• Ability to query, extract, and join telemetry from diverse systems and vendors.
• Hands-on skill using AI tools to speed up or extend investigative work (preferred).

Terms in this role

OSINT.

Open-source intelligence: investigating with publicly available information, such as social media, public records, archived pages and imagery.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on OpenAInorth_east before you apply. If we got something wrong, report this listing.