Detection Engineering & Response Lead

About the role

Nebius is seeking a Detection Engineering & Response Lead to build and manage the company's detection and response capabilities from the ground up. This role involves leading a team of analysts and engineers to own detection development, threat intelligence, and incident response across the cloud infrastructure. The successful candidate will architect security tools, define strategy, and ensure robust coverage against threats in a high-growth AI cloud environment.

Responsibilities

• Lead detection development to achieve full MITRE coverage while maintaining low false-positive rates.
• Architect and operate detection coverage across cloud and bare-metal environments.
• Build and extend internal D&R tools and pipelines, including log onboarding and automated response runbooks.
• Integrate threat intelligence into detection logic and incident response playbooks.
• Lead end-to-end incident response, including scoping, containment, root cause analysis, and post-incident reviews.
• Define and report on key D&R metrics such as MTTD and MTTR.
• Build and maintain the Security Incident Response program, including processes and on-call workflows.

Required skills

• Cloud-native environments
• Kubernetes
• Linux
• Detection engineering
• SIEM
• SQL
• SOAR
• Golang
• Temporal
• MITRE ATT&CK
• Incident response
• Memory forensics
• Log analysis
• Network traffic analysis

Nice to have

• AI/ML
• GPU clusters
• eBPF
• Falco
• Tetragon
• Threat hunting

Qualifications

• 6+ years in security operations, detection engineering, or incident response
• 1–2 years leading or mentoring a team

Benefits

• Competitive compensation
• Equity upside
• Career growth and learning opportunities
• Flexible, remote-first culture

About the Company

Nebius is a full-stack AI cloud platform supporting developers and enterprises from data and model training through to production deployment. Headquartered in Amsterdam and listed on Nasdaq, the company operates a global infrastructure with R&D hubs across Europe, the UK, North America, and Israel.