Detection Engineering & Response Lead

Stack

Responsibilities

• ▹Lead detection development and achieve full MITRE coverage
• ▹Work with 20+ alert-consuming teams to keep signal high
• ▹Architect detection coverage across cloud and bare-metal environments
• ▹Build internal D&R tools and pipelines
• ▹Integrate threat intelligence into detection logic and IR playbooks
• ▹Lead incident response end-to-end (scoping, containment, root cause)
• ▹Define and report D&R metrics (MTTD, MTTR, coverage)

Requirements

• ▹6+ years in security operations or incident response
• ▹1-2 years leading or mentoring a team
• ▹Experience with cloud-native environments (Kubernetes, Linux)
• ▹SIEM platforms (Chronicle, Splunk, Elastic) and SQL
• ▹Building SOAR workflows (ideally with Golang and Temporal)
• ▹Knowledge of MITRE ATT&CK and similar threat frameworks
• ▹IR fundamentals: memory forensics, log analysis

Nice to have

• ▹Experience with AI/ML and GPU cluster related threats
• ▹eBPF-based detection or runtime security tooling (Falco, Tetragon)

Soft skills

About the company

Nebius is a Nasdaq-listed (NBIS), Amsterdam-headquartered full-stack AI cloud platform serving developers and enterprises from GPU orchestration to inference optimization.