Detection & Response Engineer

About the Position

We are looking for a Detection & Response Engineer to join Nebius, a leading cloud infrastructure provider for the global AI economy. You will be responsible for enhancing our cloud security monitoring and incident response capabilities.

About the Company

Nebius is building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment. With a global footprint and a team of 1,500+ engineers, we are at the forefront of cloud infrastructure and AI.

Responsibilities

• Detection Development: Maintain low false-positive and false-negative rates. Work closely with alerts consumers to ensure they can act quickly without missing genuine threats.
• Architect and Operate Detection Coverage: Across our cloud and bare-metal environments.
• Build and Extend D&R Tools: Onboard new logs, build and automate response runbooks.
• Integrate Threat Intelligence: Into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure.
• Lead Incident Response: Scoping, containment, root cause analysis, post-incident reviews, and controlling critical action items.
• Partner with Compliance and Engineering Teams: To detect real threats while meeting the needs of both engineers and regulators.
• Define and Report on D&R Metrics: MTTD, MTTR, detection coverage, false positive rates, etc.
• Build and Maintain Security Incident Response Program: People, processes, tools.
• Build Tools, Runbooks, and On-call Processes: That scale as the company grows.

Requirements

• 6+ years in security operations, detection engineering, or incident response.
• Deep hands-on experience with cloud-native environments (Kubernetes, Linux workloads, container-based infrastructure).
• Strong detection engineering skills: Writing and tuning rules/detections in SIEM platforms (e.g., Chronicle, Splunk, Elastic) and SQL.
• Experience building or operating SOAR workflows and automating response at scale (ideally with Golang and Temporal).
• Working knowledge of threat intelligence frameworks (MITRE ATT&CK, Pyramid of Pain, Kill Chain) and how to operationalize them in detections.
• Solid IR fundamentals: Memory forensics, log analysis, network traffic analysis, and post-incident reporting.
• Stakeholder management: Able to coordinate across engineers, compliance, legal, executives during active incident phase.

Nice to Have

• Experience with AI/ML and GPU clusters related threats.
• Familiarity with eBPF-based detection or runtime security tooling (Falco, Tetragon).
• Background in threat hunting.

We Offer

• Competitive compensation with equity upside in a Nasdaq-listed, high-growth company.
• Flexible, remote-first culture.
• Career growth and learning opportunities.
• Collaborative and innovative culture.
• Opportunity to work on impactful AI projects.
• International environment and talented teams.

About the Hiring Process

1. Recruiter's chat (30mins)
2. Live-coding interview (60mins) to assess basic coding skills
3. Security interview (60mins) to assess domain expertise
4. Incident Response interview (90mins) to assess practical experience
5. Final interview (45mins) to close the hiring process

Equal Opportunity Statement

Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.

Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.

If you need accommodations during the application process, please let us know.

Apply for this Job

Contact sales