# Detection & Response Engineer

**Company**: Nebius
**Location**: Remote - Europe
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/nebius/jobs/4918986101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_97595d08-e86

## Description

We're hiring a Detection & Response Engineer to build and run our D&R capability from the ground up. You'll work on detection engineering, threat intelligence, and incident response functions across Nebius Cloud.

Responsibilities:

- Detection development: maintain low false-positive and false-negative rates

- Architect and operate detection coverage across our cloud and bare-metal environments

- Build and extend our internal D&R tools and pipelines

- Integrate threat intelligence into detection logic and IR playbooks

- Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews

- Partner with Compliance and Engineering teams to detect real threats while meeting regulatory needs

- Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates

- Build and maintain Security Incident Response program: people, processes, tools

Requirements:

- 6+ years in security operations, detection engineering, or incident response

- Deep hands-on experience with cloud-native environments (Kubernetes, Linux workloads, container-based infrastructure)

- Strong detection engineering skills: writing and tuning rules/detections in SIEM platforms and SQL

- Experience building or operating SOAR workflows and automating response at scale

- Working knowledge of threat intelligence frameworks (MITRE ATT&CK, Pyramid of Pain, Kill Chain)

- Solid IR fundamentals: memory forensics, log analysis, network traffic analysis, and post-incident reporting

Nice to have:

- Experience with AI/ML and GPU clusters related threats

- Familiarity with eBPF-based detection or runtime security tooling (Falco, Tetragon)

- Background in threat hunting

Benefits:

- Competitive compensation

- Career growth and learning opportunities

- Flexibility and ownership

- Collaborative and innovative culture

- Opportunity to work on impactful AI projects

- International environment and talented teams

## Skills

### Required
- cloud-native environments
- detection engineering
- threat intelligence
- incident response
- SIEM platforms
- SQL
- SOAR workflows
- MITRE ATT&CK

### Nice to have
- AI/ML and GPU clusters related threats
- eBPF-based detection
- runtime security tooling
- threat hunting

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/nebius/jobs/4918986101?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)