Product Manager, Cyber Defense and Blue Team

ABOUT THE TEAM OpenAI’s Cyber team works to make frontier AI a decisive advantage for defenders. The Cyber Blue Team is an operator-led group focused on turning real defensive problems into better models, useful products, safe Codex workflows, and integrations with the security tools defenders already use. Our ambition is simple: Raise attacker cost. Lower defender toil. Prove it by defending OpenAI; scale it through the ecosystem. We are not setting out to build another SIEM or autonomous SOC. We want to build the AI reasoning and workflow layer that helps security teams investigate threats, create and validate detections, improve their controls, and respond with greater speed and confidence. ABOUT THE ROLE We are looking for a Product Manager to help build a new generation of AI-powered cyber defense products. You will work closely with security practitioners, researchers, engineers, designers, internal security teams, customers, and technology partners to turn emerging model capabilities into products that solve meaningful defensive problems. This is an early-stage product role. The work will span product discovery, prototyping, evaluation, development, launch, and iteration. You will help the team identify where AI can create the most value for defenders and translate those opportunities into clear, usable, and trustworthy product experiences. Initial areas of focus may include: - Detection engineering and detection-content development - Threat hunting and investigation - Security validation and control testing - AI-agent and MCP runtime defense - Integrations with security platforms and enterprise workflows - Safe, governed assistance for incident response The specific roadmap will continue to evolve based on model progress, practitioner needs, internal learnings, and customer feedback. IN THIS ROLE, YOU WILL - Work with security practitioners to understand high-value defensive workflows, recurring pain points, and opportunities for AI to materially improve outcomes. - Help shape and build products from early concept through prototype, evaluation, launch, and ongoing iteration. - Translate complex security and model capabilities into clear product requirements and intuitive user experiences. - Partner with research and engineering teams to connect model improvements with real product use cases. - Collaborate with OpenAI’s internal Detection & Response team to learn from real operational needs and develop reusable capabilities. - Help develop Codex-based workflows that allow defenders to investigate, create, test, and improve security content using the tools they already trust. - Work with security vendors and customers on integrations, design partnerships, and early deployments. - Define practical measures of product quality, including accuracy, usefulness, safety, adoption, and improvements in analyst efficiency. - Help establish appropriate safeguards for permissions, approvals, auditability, tenant isolation, and high-impact security actions. - Support product launches, technical demonstrations, customer engagements, and practitioner-focused content. - Turn lessons from individual engagements into repeatable products, playbooks, and platform capabilities. YOU MIGHT THRIVE IN THIS ROLE IF YOU - Have experience building enterprise, developer, infrastructure, or cybersecurity products. - Are excited by zero-to-one product development and comfortable working in areas where the product, market, and technology are still evolving. - Understand how to move from a compelling technical capability to a product that users can depend on. - Can work effectively with researchers, engineers, designers, security practitioners, and commercial teams. - Have strong product judgment and can balance user value, technical feasibility, safety, and speed. - Are comfortable working directly with customers and partners to learn, prototype, and iterate. - Can make complex technical systems understandable without oversimplifying them. - Care deeply about building products that are measurable, trustworthy, and useful in real operational environments. - Are willing to operate at multiple levels—from product direction and roadmap discussions to detailed workflow design and launch execution. NICE TO HAVE - Experience with security operations, detection and response, threat intelligence, identity security, endpoint security, or security analytics. - Familiarity with products such as SIEM, EDR, XDR, SOAR, network security, identity platforms, or security validation tools. - Experience building AI products, agentic systems, developer tools, or enterprise integrations. - Familiarity with model evaluations, benchmark design, or human-in-the-loop product workflows. - Experience building partner ecosystems, APIs, connectors, or platform products. - A history of working closely with technical or practitioner communities. WHAT SUCCESS COULD LOOK LI