Offensive Security Engineer (Remote, Worldwide)

Ever dreamt of being the ultimate digital detective, but with an offensive twist? Here's your chance to dive deep into the very core of cloud infrastructure, challenging its defenses and unearthing hidden vulnerabilities before the bad actors do. Nebius, a trailblazer in the AI cloud economy, is searching for a brilliant Offensive Security Engineer to join our global team. If you thrive on outsmarting sophisticated threats and love the thrill of an adversarial simulation, this role offers an unparalleled opportunity to shape the security of cutting-edge AI platforms.

Overview

Nebius is truly at the forefront of powering the global AI economy, building a full-stack cloud platform that simplifies everything from data handling and model training to production deployment. We're engineering-driven, tackling complex challenges in GPU orchestration, inference optimization, compute, storage, networking, and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, our global footprint spans R&D hubs across Europe, the UK, North America, and Israel, supported by a team of over 1,500 experts. Our internal offensive security team plays a critical role. We lead the penetration testing program, orchestrate red team engagements, and conduct offensive research to uncover the most advanced attack scenarios against high-value assets across the Nebius Cloud stack. This is a fully remote opportunity, open to talent worldwide.

Key Responsibilities

Design and execute sophisticated adversarial simulations, challenging our cloud platform defenses at every level.
Lead targeted penetration tests against various components of our infrastructure, applications, and services.
Conduct in-depth offensive research, identifying novel attack vectors and developing new tools and techniques to mimic real-world threat actor capabilities.
Collaborate closely with engineering teams, providing actionable insights and recommendations to enhance our security posture.
Contribute significantly to our red team operations, planning and executing covert engagements that test our detection and response capabilities.
Document findings thoroughly, preparing comprehensive reports for technical and non-technical audiences.

Requirements

Proven Experience: You should possess solid experience in offensive security, including penetration testing and red teaming, ideally within a cloud environment such as AWS, GCP, or Azure.
Technical Acumen: Strong familiarity with common attack techniques, tactics, and procedures (TTPs) is essential.
Programming Skills: Proficiency in at least one scripting or programming language like Python, Go, or similar is highly valued.
Security Fundamentals: An excellent understanding of network protocols, operating systems, and web application security principles.
Vulnerability Expertise: Experience with security tools and frameworks, along with a knack for identifying and exploiting vulnerabilities.
Communication: The ability to clearly communicate complex technical findings and recommendations to diverse audiences is very important for this role.
Problem-Solver: A proactive mindset, excellent problem-solving skills, and a strong sense of curiosity.

What You'll Gain

Joining Nebius means becoming part of a visionary team that's redefining the AI landscape. You'll work on genuinely hard and impactful problems, directly influencing the security of a global cloud platform. We offer a dynamic environment where continuous learning and professional growth are encouraged, with opportunities to explore cutting-edge security research and techniques. You'll collaborate with brilliant engineers from around the world, making a tangible difference in protecting high-value assets and contributing to the overall resilience of our infrastructure.