The posting, in Nebius Group's own words
archived Oct 1, 2026About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO. This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them. You will be responsible for implementing, managing, integrating and maintaining security systems across the organization’s IT landscape. The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices.
Read the full posting ↓
Your responsibilities will include:
Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security. Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms. Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments. Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation. Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes. Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy. Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows. Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices.
We expect you to have:
6+ years of experience in IT security, with a strong focus on System, Network, Information, Cyber. With at least 3 years in a Security Engineering role. Proven hands-on engineering experience with enterprise security platforms - including policy authoring, tuning, incident workflow configuration, and platform administration. Experience securing data across cloud environments and SaaS platforms, including shadow IT and unmanaged data stores. Strong understanding of identity and access management and data access governance principles. Experience working cross-functionally with Security, IT, Engineering, Product, and GRC teams. Strong analytical mindset with the ability to communicate security risks clearly to technical and non-technical stakeholders. Excellent written and verbal communication skills in English. Proactive, detail-oriented, and ownership-driven. Hand-on experience with multiple technologies such as: XDR (Extended Detection & Response), SWG (Secure Web Gateway), DLP (Data Leakage Prevention), Email Security, Network security (Firewalls, NAC, NDR), IGA (Identity Governance & Administration), CASB (Cloud Access Security Broker), PAM (Privileged Access Management), EPM (Endpoint Privilege Management), BAS (Breach & Attack Simulation), Vulnerability Scanners, SIEM (Security Information & Event Management), SOAR (Security Orchestration, Automation & Response), CTI (Cyber Threat Intelligence), Patch Management, TPRM (Third-Party Risk Management), EASM (External Attack Surface Management).