Detection & Response Lead

About the role

Nebius is seeking a Detection Engineering & Response Lead to build and manage the company's detection and response capabilities from the ground up. This role involves leading a team of analysts and engineers to oversee detection development, threat intelligence, and incident response functions across the cloud infrastructure. The successful candidate will shape the D&R strategy, handle complex security incidents, and develop tools to ensure scalable security operations.

Responsibilities

• Lead detection development to maintain low false-positive and false-negative rates while working with internal teams to ensure actionable alerts.
• Architect and operate detection coverage across cloud and bare-metal environments.
• Build and extend internal D&R tools and pipelines, including onboarding new logs and automating response runbooks.
• Integrate threat intelligence into detection logic and IR playbooks to track adversary TTPs.
• Lead incident response end-to-end, including scoping, containment, root cause analysis, and post-incident reviews.
• Define and report on D&R metrics such as MTTD, MTTR, and detection coverage.
• Build and maintain the Security Incident Response program, including people, processes, and tools.

Required skills

• Cloud-native environments
• Kubernetes
• Linux
• Detection engineering
• SIEM
• SQL
• SOAR
• Golang
• Temporal
• Threat intelligence
• MITRE ATT&CK
• Memory forensics
• Log analysis
• Network traffic analysis

Nice to have

• AI/ML
• GPU clusters
• eBPF
• Falco
• Tetragon
• Threat hunting

Benefits

• Competitive compensation
• Equity upside
• Career growth and learning opportunities
• Flexible, remote-first culture

About the Company

Nebius is a full-stack AI cloud platform supporting developers and enterprises from data and model training through to production deployment. Listed on Nasdaq and headquartered in Amsterdam, the company operates with a global footprint and a team of over 1,500 employees.