search Browse Jobs
Vulnerability Operation Center Lead Nebius · Remote - Europe
Nebius logo

Nebius

company page ↗

Vulnerability Operation Center Lead

🗓️ Posted 2026-09-01 Remote - Europe Hybrid ICT
💰 Salary Not shared 📊 Market 6,000 EUR–8,500 EUR/mo

About the Company

Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers, Nebius focuses on solving hard problems across compute, storage, networking and applied AI, from large-scale GPU orchestration to inference optimization. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.

About the Role

We're building a Vulnerability Operations Center from the ground up and need a senior practitioner to lead it. You'll own the full vulnerability management lifecycle - from detection through triage to remediation tracking and reporting - across Nebius' cloud infrastructure, product and hardware stack. This is a high-impact role with big ownership: you'll define processes, select tooling, work directly with engineering teams, and set the standard for how Nebius responds to vulnerabilities.

Responsibilities

  • ● Improve and maintain automated vulnerability triaging capabilities and vulnerability data quality through data enrichment (internal and external intelligence feeds), quality metrics, AI-assisted triage, context-aware risk scoring, and vulnerability correlation/chaining.
  • ● Perform hands-on validation and triaging of most critical/zero-days vulnerabilities.
  • ● Work closely with vulnerability data consumers and stakeholders across the organization to meet engineering, compliance, and regulatory requirements by delivering high-quality, actionable findings and driving effective remediation.
  • ● Contribute to the development of internal platforms, including the Unified Vulnerability Management (UVM) system and the security orchestration platform, to automate core vulnerability management workflows and reduce manual effort.
  • ● Identify current deficiencies in patch management, drive and oversee improvements across engineering teams and business units to improve remediation efficiency and reduce organizational risk.
  • ● Own vulnerability intake from all sources - scanners, bug bounty, threat intel feeds, and penetration tests.
  • ● Prioritize findings using risk-based frameworks (CVSS, EPSS, SSVC, asset criticality, exploitability context, business impact) and reduce false positive noise.
  • ● Drive remediation accountability across infrastructure, platform, and product engineering teams.
  • ● Identify, track and report vulnerability management metrics, present KPIs and trends to security leadership.
  • ● Coordinate response to critical/zero-day vulnerabilities, acting as the primary.