Description
We're hiring a Detection & Response Engineer to build and run our D&R capability from the ground up. You'll work on detection engineering, threat intelligence, and incident response functions across Nebius Cloud.
Responsibilities:
- Detection development: maintain low false-positive and false-negative rates
- Architect and operate detection coverage across our cloud and bare-metal environments
- Build and extend our internal D&R tools and pipelines
- Integrate threat intelligence into detection logic and IR playbooks
- Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews
- Partner with Compliance and Engineering teams to detect real threats while meeting regulatory needs
- Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates
- Build and maintain Security Incident Response program: people, processes, tools
Requirements:
- 6+ years in security operations, detection engineering, or incident response
- Deep hands-on experience with cloud-native environments (Kubernetes, Linux workloads, container-based infrastructure)
- Strong detection engineering skills: writing and tuning rules/detections in SIEM platforms and SQL
- Experience building or operating SOAR workflows and automating response at scale
- Working knowledge of threat intelligence frameworks (MITRE ATT&CK, Pyramid of Pain, Kill Chain)
- Solid IR fundamentals: memory forensics, log analysis, network traffic analysis, and post-incident reporting
Nice to have:
- Experience with AI/ML and GPU clusters related threats
- Familiarity with eBPF-based detection or runtime security tooling (Falco, Tetragon)
- Background in threat hunting
Benefits:
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams