← Back to jobs

Cyber Operations Lead, Critical Harm Operations

openai

Híbrido San Francisco
Advertising

Job Score

90 pts
Hybrid model (+80) Advertising (+10)

About the Team

Critical Harm Operations sits within User Safety & Risk Operations and builds enforcement systems for the most severe user-safety risks—including Frontier Risk and Material Harm—that are accurate, fast, defensible, and scalable. The Cyber vertical turns policy into reviewer standards, calibrated judgment, quality systems, escalation paths, and safe automation.

About the Role

We’re looking for a senior cybersecurity and cyber intelligence practitioner who is also an operations leader, strategist, and people manager. You’ll bring sound cyber judgment, strong analytical and automation instincts, and the ability to stay close to the work while setting direction, managing and developing people, aligning partners, building programs from 0→1, and translating ambiguity into durable operating systems.

This role combines senior individual-contributor depth with direct people-management accountability. You’ll personally shape complex cyber judgments, operating models, SOPs, quality systems, and automation strategies while building, coaching, and holding accountable a high-performing team. You’ll also lead through influence across FTEs, BPO partners, and cross-functional teams. Baseline operational health—including quality, queue coverage, productivity, and SLA adherence—is table stakes; success is additionally measured by durable improvements to decision quality, stakeholder alignment, reviewer capability, and the systems that run the operation.

This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.

In this role, you will:

  • Set the strategic direction for Cyber Operations and translate high-level organizational priorities into a clear operating model, roadmaps, SOPs, escalation paths, quality goals, and safe-access strategies.

  • Serve as the senior cybersecurity and cyber intelligence expert for complex and high-risk decisions across ChatGPT, API, Codex, agents, and emerging product surfaces.

  • Build trust, create clarity, navigate disagreement, and move people through ambiguity across FTEs, BPO partners, and cross-functional teams.

  • Turn policy ambiguity, quality misses, appeals, and reviewer disagreement into clear decision rules, calibration examples, training, and tooling requirements.

  • Build and scale reviewer capability through onboarding, certification, coaching, feedback, recurring calibration, and close partnership with vendor leadership.

  • Own operational health across Cyber Operations, including queue coverage, reviewer productivity, quality metrics, SLA adherence, escalation hygiene, and proactive identification of performance gaps before downstream teams need to flag them.

  • Use analysis and automation to diagnose root causes, surface risk, prioritize high-leverage fixes, and reduce manual effort.

  • Build durable quality and evaluation systems that improve decision quality through calibration, adjudication, monitoring, and feedback loops.

  • Build new operational capabilities from 0→1, then scale them: define the problem, align partners, test the model, establish metrics, and turn what works into repeatable operations.

  • Present crisp recommendations, tradeoffs, and operational strategy to executives and internal and external partners; represent Cyber Operations in high-stakes discussions and launch decisions.

You might thrive in this role if you:

  • Have 8+ years of experience in cybersecurity, cyber intelligence, threat intelligence, incident response, security research, or a related field, including 4+ years of leading teams.

  • Built and scaled a cyber operations, cyber intelligence, or abuse-prevention capability across regions, products, or a large user base.

  • Designed and launched human-in-the-loop automation or evaluation systems that materially improved safety, quality, or operational scale.

  • Bring strong cyber judgment and can reason deeply about attacker behavior, emerging threats, abuse patterns, and ambiguous dual-use activity.

  • Have built or improved high-stakes operations, reviewer programs, QA systems, escalation workflows, or vendor/BPO programs—and can translate high-level strategy into execution.

  • Are highly analytical and can turn operational data into clear priorities, root-cause diagnoses, and measurable improvements.

  • Have a record of creating programs, workflows, or teams in ambiguous environments; you are a self-starter who creates structure and follows through.

  • Can influence across organizations, coach others, navigate disagreement, and bring people together across functions and levels.

  • Have exceptional executive presence and presentation skills; you can distill complex cyber risk into crisp recommendations, tradeoffs, and decisions for senior leaders.

  • Bring exceptional customer-service acumen: understand user and partner needs, communicate with empathy and precision, de-escalate sensitive situations, and balance safety with a high-quality experience.

  • Can translate complex cyber and policy judgment into reviewer-usable SOPs, decision trees, training, and concise written recommendations.

  • Exercise sound judgment and discretion when handling sensitive material.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. 

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.

For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link.

OpenAI Global Applicant Privacy Policy

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About Advertising

The Advertising area is aimed at the planning, creation, and delivery of communication campaigns to promote brands, products, ideas, or services. Professionals in the sector work in advertising agencies or in-house marketing departments in creative fields (art direction, copywriting), strategic planning, account management, and media buying.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Social Media

The Social Media area is one of the most dynamic and constantly evolving fields in digital marketing. Social media professionals are responsible for creating, managing, and optimizing brand presence on digital platforms, building engagement and community with the target audience.

Key skills include social media management (Instagram, TikTok, LinkedIn, Facebook, YouTube), social media content creation, community management, paid social media (Meta Ads, LinkedIn Ads, TikTok Ads), metrics analysis, and strategic planning. Tools like Hootsuite, Sprout Social, Buffer, Later, and analytics platforms are essential.

Social media professionals in technology companies are highly valued, especially those who master paid social, social media analytics, and content strategies for different platforms. The field offers opportunities from analyst to head of social media, with a focus on growth, engagement, and return on investment.

About Web3

The Web3 area represents the new phase of the decentralized internet, built on blockchain technology. Web3 professionals create decentralized applications (dApps), interact with smart contracts, manage digital assets (cryptocurrencies and NFTs), and utilize DeFi (Decentralized Finance) protocols, revolutionizing how data, ownership, and finance are managed online.

About Customer Service

The Customer Service / Client Relations area is essential for ensuring customer satisfaction, retention, and a good relationship. Professionals in this field are the primary interface for communication, handling inquiries, requests, feedback, and ensuring a high-quality day-to-day experience. Skills in communication, problem-solving, empathy, and patience are indispensable.

About Blockchain

The Blockchain area involves the development and implementation of secure and distributed transaction ledgers. Professionals in this field work with smart contract development, cryptography, consensus algorithms, and platforms such as Ethereum, Hyperledger, and Solana, ensuring security and decentralization for various types of applications.

About Product Owner

The Product Owner (PO) is the professional responsible for maximizing the value of the product delivered by the development team. They act as the voice of the customer and stakeholders, managing and prioritizing the product backlog, defining clear user stories, and ensuring the team works on the most valuable items for the business.

Key skills include backlog management, user story writing, prioritization (Mascow, RICE), agile methodologies (Scrum, Kanban), and stakeholder communication. Knowledge of tools like Jira, Trello, Azure DevOps, and Miro is essential.

Product Owners are highly sought-after professionals in the technology market, working collaboratively with Scrum Masters, Product Managers, and engineering teams to drive agility and continuous value delivery.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

Landing Top-Tier Traffic Analyst and SEO Roles

The New Era of Performance Marketing

The digital marketing landscape has undergone a radical transformation in recent years. The era of the "button pusher" who merely launched Meta Ads campaigns or stuffed keywords into WordPress is officially over. Today, companies—especially top-tier US startups and global tech corporations offering six-figure compensations—are looking for analytical, Growth-focused, and highly Data-Driven professionals.

Whether managing multi-million dollar paid media budgets or optimizing site architecture for the new AI-driven search engines, the Traffic and SEO Analyst has become the engine of predictable revenue for tech companies worldwide.

1. Technical SEO and the AI Revolution (SGE)

With Google's introduction of the Search Generative Experience (SGE), SEO is no longer just about backlinks and search volume. It now requires a deep understanding of search intent and topical authority.

What Tech Recruiters are looking for:

  • Technical SEO Mastery: The ability to analyze Core Web Vitals, manage Crawl Budgets, and optimize JavaScript rendering (a critical factor for modern frameworks like React and Next.js).
  • Advanced Data Analysis: Fluency in enterprise tools such as Screaming Frog, Semrush, Ahrefs, and Google Search Console.
  • Focus on E-E-A-T: Experience, Expertise, Authoritativeness, and Trustworthiness. Understanding how to structure content so that Google's algorithm recognizes it as a reliable primary source.
"Modern SEO success requires you to stop optimizing for algorithms and start optimizing for the user journey, using technical data to remove any friction along the way." — Google Search Central Guidelines

2. Paid Traffic: From Operational to Strategic

In the realm of paid media (Google Ads, Meta Ads, LinkedIn Ads, TikTok Ads), platform automation handles most of the bidding work (Smart Bidding). The modern candidate's competitive edge lies in acquisition strategy and financial viability analysis.

Metrics you must master for your interviews:

  1. CAC (Customer Acquisition Cost): Moving beyond Cost Per Click (CPC). Understanding exactly how much it costs to acquire a paying user.
  2. LTV (Lifetime Value): Knowing how to cross-reference acquisition costs with the value a customer brings to the company over time (LTV:CAC ratio).
  3. ROAS vs. ROI: Grasping the crucial difference between the direct return on ad spend (ROAS) and the actual return on investment for the entire business (ROI).
  4. Server-Side Tracking: With the deprecation of third-party cookies, mastering the Conversions API and Google Tag Manager (GTM) Server-Side is a massive senior requirement.

3. Building an Unbeatable Portfolio

In the global remote market, degrees matter far less than proven results. Your portfolio shouldn't just be a resume; it should be a comprehensive document of Case Studies.

Structure your cases using the STAR method:

  • Situation: What was the baseline? E.g., "The e-commerce brand was burning $10k/month with a 1.2 ROAS."
  • Task: What was the goal? E.g., "Reduce CPA by 30% and increase non-branded organic traffic."
  • Action: What did YOU do technically? E.g., "Audited GTM, restructured PMax campaigns, and applied Schema markup in the HTML."
  • Result: The numerical impact. E.g., "Scaled ROAS to 3.8 and grew organic traffic by 45% in 3 months."

4. Certifications That Actually Open Doors

If you want to bypass strict Applicant Tracking Systems (ATS) like Greenhouse or Workday, ensure your LinkedIn and resume feature official certifications issued by the tech platforms themselves:

References and Must-Reads

To stay relevant in a market that changes weekly, we highly recommend following these official sources:

  1. Official Google Search Central Documentation.
  2. Annual State of Marketing Reports from HubSpot and Semrush.
  3. Technical articles focused on Data-Driven Marketing from the Harvard Business Review.

© 2026 Mondywork. Empowering career evolution in Tech, Design, and Digital Marketing.