Remote Threat Intelligence Investigator (AI Security)

Neura Market; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

OpenAI is seeking a Technical Threat Investigator to protect our systems by conducting deep investigations into sophisticated threat actors targeting our models and ecosystem. You will independently drive end-to-end investigations, translate findings into durable tooling, and collaborate with Safety, Product Policy, and Integrity teams to disrupt adversarial activity.

Responsibilities include building scalable workflows, leveraging OSINT and internal telemetry, and producing clear high-signal

Qualifications

• Experience in threat intelligence, incident response, offensive security, or a closely related field.
• Solid ability to independently drive deep technical investigations from ambiguous signals to actionable findings.
• Experience using AI to extend or accelerate investigative workflows.
• Strong scripting ability and comfort building lightweight automation and tooling.

Responsibilities

• Conduct end-to-end investigations into advanced threat actors and model misuse.
• Model attacker behavior and anticipate misuse patterns to proactively disrupt adversaries.
• Leverage telemetry, OSINT, and vendor data to produce high-confidence findings on adversarial use of OpenAI’s models.
• Translate findings into improvements across detection, enforcement, intel, and safety pipelines.

Skills

Threat intelligence

Incident response

Offensive security

Investigations

Tools

OSINT tools

Job description

OpenAI is seeking a Technical Threat Investigator to protect our systems by conducting deep investigations into sophisticated threat actors targeting our models and ecosystem. You will independently drive end-to-end investigations, translate findings into durable tooling, and collaborate with Safety, Product Policy, and Integrity teams to disrupt adversarial activity.

Responsibilities include building scalable workflows, leveraging OSINT and internal telemetry, and producing clear high-signal