Security Incident Response Team Manager

Quick Facts

• Role: Security Incident Response Team Manager
• Focus: Hands-on leadership for complex security incidents and AI-assisted investigation/response

Description

Lead and manage the Security Incident Response Team, directing consequential incidents across research, products, and infrastructure. You will command incident response, establish investigation standards, and make containment and recovery decisions even when evidence is incomplete. You will also shape AI-first incident response capabilities to connect evidence, test hypotheses, and coordinate bounded responses at scale.

Responsibilities

• Hire, coach, and develop incident responders combining investigative depth, engineering ability, and sound judgment.
• Lead incident command: define severity/scope, coordinate investigation workstreams, and weigh containment options against exposure and disruption.
• Build and ship agentic capabilities using OpenAI’s models for evidence collection, investigation context, and response coordination.
• Set investigation standards across identity, endpoints, cloud, Kubernetes, and large-scale compute.
• Drive incidents to verified closure: validate containment/recovery, document remaining risk, and track corrective actions.
• Coordinate with engineering, infrastructure, legal, privacy, and other stakeholders; provide executives clear updates with uncertainty reflected.
• Build sustainable on-call coverage, escalation paths, and handoffs across regions.
• Increase readiness for new research and infrastructure capabilities using playbooks and scenario exercises (including agent-based, cross-system scenarios).
• Convert incident evidence into stronger defenses via Detection Engineering, Threat Intelligence, Security Observability, and security platform teams.
• Prioritize improvements using incident outcomes and readiness evidence; measure response quality and effectiveness.

Benefits

• Opportunity to protect frontier AI by strengthening defenses through every investigation and readiness exercise.