Nebius

Security Engineering Lead

Nebius
Apply
3 months ago
Israel (city not specified)Staff+

Responsibilities

  • Engineer, deploy, integrate, manage, and continuously tune identity and access, threat detection and response, cloud security, network security, endpoint, email, SaaS, and data protection controls.
  • Define and maintain security policies and configurations across endpoints, email, SaaS, network, and cloud platforms.
  • Design and implement visibility into systems, processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments.
  • Monitor, triage, and investigate security alerts and risks, coordinating escalation and remediation with Security, IT, and Network teams.
  • Conduct risk assessments and identify security-control gaps across systems, pipelines, and business processes.
  • Support security and privacy compliance requirements including GDPR, ISO 27001, and SOC 2.
  • Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems and workflows.
  • Maintain documentation, runbooks, and operational security guidelines.

Requirements

  • At least 6 years of IT security experience, including at least 3 years in a Security Engineering role.
  • Hands-on experience engineering and administering enterprise security platforms, including policy authoring, tuning, incident workflow configuration, and platform administration.
  • Experience securing data across cloud and SaaS environments, including shadow IT and unmanaged data stores.
  • Strong understanding of identity and access management and data access governance principles.
  • Experience collaborating cross-functionally with Security, IT, Engineering, Product, and GRC teams.
  • Ability to analyze and communicate security risks clearly to technical and non-technical stakeholders.
  • Excellent written and verbal English communication skills.
  • Hands-on experience with multiple security technologies including XDR, SWG, DLP, Email Security, Firewalls, NAC, NDR, IGA, CASB, PAM, EPM, BAS, Vulnerability Scanners, SIEM, SOAR, CTI, Patch Management, TPRM, and EASM.
  • Preferred experience building or scaling a security program from the ground up.
  • Preferred experience with cloud-native security services including AWS, Azure, or Google.
  • Preferred scripting or automation experience with Python or PowerShell.
  • CISSP or CISM certification and a BSc in Computer Science, Information Security, or a related field are preferred.
  • Project and people management experience is a bonus.

Benefits

  • Competitive compensation.
  • Career growth and learning opportunities.
  • Flexibility and ownership.
  • Collaborative and innovative culture.
  • Opportunity to work on impactful AI projects.
  • International environment with talented teams.
  • Applicants must be authorized to work in the country where they apply and provide proof of employment eligibility.
  • Reasonable accommodations are available during the application process.

Tech Stack

AWSAzurePowerShellPython

Categories

Nebius

About Nebius

1,001-5,000 employees

Nebius builds a full-stack AI cloud offering GPU compute, storage, and tools for training and deploying ML models for startups, enterprises, and research labs. It sells consumption-based cloud infrastructure (IaaS/PaaS) and managed services tailored to generative AI workloads, including large-scale model training and inference. The company is headquartered in Amsterdam and operates as an independent provider.

Contact me