Incident Commander, Detection & Response

Job not on LinkedIn

🔥 0 minutes ago

🌐 Australia, Japan, +3 more countries – Remote

🇦🇺 Australia – Remote 🇯🇵 Japan – Remote 🇮🇳 India – Remote 🇸🇬 Singapore – Remote 🇰🇷 South Korea – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👻 Ghost score 21%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

OpenAI

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2015

🤖 Artificial Intelligence

☁️ SaaS

🏢 Enterprise

Artificial Intelligence • SaaS • Enterprise

OpenAI is a leading research organization and company dedicated to creating advanced artificial intelligence technology, with a strong emphasis on safety and ethical considerations. OpenAI's mission is to ensure that artificial general intelligence (AGI) benefits all of humanity. The company develops AI products like ChatGPT, which can assist users with tasks ranging from everyday requests to complex enterprise solutions. OpenAI also provides an API platform that integrates its AI models into various applications. The company is focused on innovation in AI and improving data analysis capabilities, while emphasizing safety and ethical governance of their systems.

📋 Description

• Lead response to complex security incidents affecting OpenAI intellectual property, customer data, and infrastructure • Establish response priorities and coordinate technical work streams • Drive containment and recovery decisions within agreed authority • Keep stakeholders informed as facts evolve • Work with security and infrastructure teams across endpoints, identity, cloud, and compute environments • Maintain clear ownership and effective handoffs across time zones • Run incident command from initial assessment through containment, recovery, and closure • Establish severity, scope, response objectives, and escalation needs • Assign work stream owners and coordinate investigation, containment, and recovery in parallel • Maintain a decision log and distinguish confirmed facts from assumptions • Communicate incident status, impact, uncertainty, actions underway, and next updates to technical and nontechnical stakeholders • Manage cross-time-zone handoffs with explicit command ownership, current status, outstanding risks, pending decisions, and next actions • Improve response readiness through exercises, playbooks, and post-incident reviews • Track agreed corrective actions with their owners • Partner with detection engineers to evaluate telemetry and detection quality • Close incident-related visibility gaps and prioritize practical response automation

🎯 Requirements

• Personally led complex security incidents as incident commander or equivalent response lead • Clear examples of decisions, delegation, escalation, and outcomes • Ability to make sound decisions with incomplete information and revise them as evidence changes • Ability to coordinate responders across teams and time zones, resolve conflicting priorities, and maintain clear ownership during handoffs • Calm and precise communication under pressure • Security and infrastructure fundamentals sufficient to challenge investigation findings and assess containment and recovery options • Understanding of detection engineering, including telemetry coverage, detection logic, false positives, false negatives, and validation • Ability to query and interpret evidence to support response decisions • Ability to turn incident lessons into practical improvements to readiness, playbooks, detection coverage, and response tooling • Authorization to work in the country where the job is located may be required

🏖️ Benefits

• Equal opportunity employer • Reasonable accommodations for applicants with disabilities • Immigration and sponsorship support may be provided based on individual circumstances • Background checks administered in accordance with applicable law

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume