Lead, Cloud Detection & Incident Response

Nebius Group; Brussel; Remote; EUR 120,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Equity upside

Remote-first culture

International environment

Job summary

Nebius is hiring a Detection Engineering & Response Lead to build and run its D&R capability from the ground up. You will own detection engineering, threat intelligence, and incident response across Nebius Cloud, and lead a small, growing team of analysts and engineers.

This lead engineering role handles complex detection development, IR, forensics, and shaping the D&R strategy, while collaborating with Compliance and Engineering teams to meet regulator needs.

Qualifications

• 6+ years in security operations, with 1–2 years leading or mentoring a team.
• Hands-on experience with cloud-native environments (Kubernetes, Linux workloads, container-based infra).
• Strong detection engineering skills: writing and tuning rules in SIEM platforms and SQL.
• Experience building or operating SOAR workflows and automating response at scale.

Responsibilities

• Lead detection development and coordinate 20+ alerting teams to keep noise low and signals high.
• Architect and operate detection coverage across cloud and bare-metal environments.
• Build and extend internal D&R tools and runbooks.
• Integrate threat intelligence into detection logic and IR playbooks.
• Lead end-to-end incident response: scoping, containment, post-incident reviews.
• Define and report on D&R metrics like MTTD/MTTR and coverage.

Skills

Security operations

Detection engineering

Incident response

Cloud-native

Kubernetes

SIEM rules

Tools

Chronicle

Splunk

Elastic

SOAR

Golang

Temporal

Job description

Nebius is hiring a Detection Engineering & Response Lead to build and run its D&R capability from the ground up. You will own detection engineering, threat intelligence, and incident response across Nebius Cloud, and lead a small, growing team of analysts and engineers.

This lead engineering role handles complex detection development, IR, forensics, and shaping the D&R strategy, while collaborating with Compliance and Engineering teams to meet regulator needs.