Detection & Response Engineer

About the role

Nebius is seeking a Detection & Response Engineer to build and operate its D&R capability from the ground up. You will be responsible for detection engineering, threat intelligence, and incident response functions across the company's cloud infrastructure. This role involves shaping D&R strategy, automating response workflows, and partnering with engineering and compliance teams to secure cloud and bare-metal environments.

Responsibilities

• Maintain low false-positive and false-negative rates while working with internal teams to ensure actionable security alerts.
• Architect and operate detection coverage across cloud and bare-metal environments.
• Build and extend internal D&R tools and pipelines, including onboarding logs and automating response runbooks.
• Integrate threat intelligence into detection logic and IR playbooks while tracking adversary TTPs.
• Lead incident response end-to-end, including scoping, containment, root cause analysis, and post-incident reviews.
• Define and report on D&R metrics such as MTTD, MTTR, and detection coverage.
• Build and maintain the Security Incident Response program, including people, processes, and tools.

Required skills

• Security operations
• Detection engineering
• Incident response
• Kubernetes
• Linux
• SIEM
• SQL
• SOAR
• Golang
• Temporal
• MITRE ATT&CK
• Memory forensics
• Log analysis
• Network traffic analysis

Nice to have

• AI/ML
• GPU clusters
• eBPF
• Falco
• Tetragon
• Threat hunting

Benefits

• Competitive compensation
• Career growth and learning opportunities
• Flexible, remote-first culture

About the Company

Nebius is a full-stack AI cloud platform supporting developers and enterprises from data and model training through to production deployment. Listed on Nasdaq, the company has a global footprint with R&D hubs across Europe, the UK, North America, and Israel.