search Browse Jobs
Offensive Security LeadNebius · Remote - Europe
Nebius logo

Nebius

company page ↗

Offensive Security Lead

🗓️ Posted 2026-09-01 Remote - Europe Hybrid ICT
💰 Salary Not shared 📊 Market 6,000 EUR–9,000 EUR/mo

About the Company

Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack. We're hiring an Offensive Security Lead to build and run Nebius' red team capability. You'll design and execute adversarial simulation across our cloud platform - attacking the same infrastructure our customers depend on - and translate findings into measurable security improvements. This is a hands-on leadership role within Product Security Team. You will build an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack.

Requirements

  • ● 6+ years in offensive security - penetration testing, red teaming, or adversary simulation - with at least 1-2 years leading or mentoring a team.
  • ● Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes.
  • ● Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration.
  • ● Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar).
  • ● Experience running purple team exercises and working constructively with blue teams.
  • ● Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use.
  • ● Experience attacking ML infrastructure, model serving pipelines, or GPU clusters.
  • ● Reverse engineering and exploits development experience
  • ● Application security experience
  • ● Familiarity with eBPF bypass techniques or kernel-level exploitation.
  • ● Background in vulnerability research or CVE discovery.
  • ● Experience with cloud provider internals (hypervisor/networking layers).
  • ● Presenting your security research at conferences like BlackHat/DefCon, etc.
  • ● Build a red team from scratch at a company operating frontier AI infrastructure.
  • ● Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale.
  • ● Work alongside world-class engineers on infrastructure that powers frontier AI.
  • ● Competitive compensation with equity upside in a Nasdaq-listed, high-growth company.
  • ● Flexible, remote-first culture

Benefits

  • ● Competitive compensation
  • ● Career growth and learning opportunities
  • ● Flexibility and ownership
  • ● Collaborative and innovative culture
  • ● Opportunity to work on impactful AI projects
  • ● International environment and talented teams
  • ● Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI
  • ● Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.
  • ● Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.
  • ● If you need accommodations during the application process, please let us know.