Security architect manager

Nebius; Amsterdam; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Career growth

Flexible and ownership

International environment

Job summary

Nebius Group в Амстердаме ищет опытного руководителя по архитектуре безопасности, чтобы возглавить функцию кибербезопасности, сосредоточившись на Kubernetes, облачных платформах и безопасной разработке.

Обязанности включают разработку стандартов архитектуры, проведение обзоров безопасности, внедрение контроля доступа, защиты образов и CI/CD процессов.

Ищем лидера с опытом AWS/Azure и доказанной способностью влиять на инженеров и развивать безопасные решения в многокластерной среде.

Qualifications

• 7+ лет опыта в кибербезопасности, инженерной безопасности, облачной безопасности или архитектуре.
• 3+ года управления техническими командами или руководства senior technical professionals.
• Сильные практические знания Kubernetes архитектуры и безопасности контейнеров.
• Опыт защиты облачных рабочих нагрузок и распределённых систем.
• Экспертиза AWS и/или Azure в области безопасности архитектур.
• Опыт работы с RBAC, сетевыми политиками, контроллерами доступа и безопасностью образов.

Responsibilities

• Определение и поддержка архитектуры кибербезопасности, стандартов и принципов дизайна.
• Проведение обзоров архитектуры безопасности для систем и инициатив.
• Превращение требований и оценок рисков в практические меры безопасности.
• Установление принципов безопасной разработки в облаке, инфраструктуре и платформах.
• Дизайн и внедрение архитектур безопасности для Kubernetes и cloud-native сред.

Skills

Kubernetes security

Cloud security

AWS/Azure security

Security-by-design

Team leadership

Tools

Docker

Terraform

CI/CD security tooling

Snyk / SCA

Job description

Описание: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Nebius is looking for an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development.

Задачи:

• Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles.
• Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives.
• Translate threat models, business requirements, and risk assessments into practical security controls.
• Establish security-by-design principles across cloud, infrastructure, application, and platform architectures.
• Identify architectural security gaps and drive remediation roadmaps.
• Design and implement security architectures for Kubernetes-based environments and cloud-native platforms.
• Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications.
• Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management.
• Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity.
• Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments.
• Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable.
• Establish security controls for container orchestration platforms across development, testing, and production environments.
• Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads.
• Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments.
• Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management.
• Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement.
• Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies.
• Ensure alignment with organizational security requirements and relevant industry standards.
• Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations.
• Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines.
• Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning.
• Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls.
• Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery.
• Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams.
• Develop technical security standards, architecture patterns, and security control baselines.

Требования:

• 7+ years of experience in cybersecurity, security engineering, cloud security, or security architecture.
• 3+ years of experience managing technical teams or leading senior technical professionals.
• Strong practical knowledge of Kubernetes architecture and container security in production environments.
• Demonstrated experience securing cloud-native workloads and distributed systems.
• Strong expertise in AWS and/or Microsoft Azure security architecture.
• Hands-on understanding of Kubernetes RBAC, network policies, admission controllers, workload security, secrets management, and container runtime security.
• Experience with Docker or other container technologies, Kubernetes deployment workflows, and container registries.
• Strong understanding of cloud networking, IAM, encryption, key management, logging, and workload protection.
• Practical experience with Infrastructure as Code and automated security controls.
• Experience securing CI/CD pipelines and integrating security into software development processes.
• Knowledge of threat modeling, vulnerability management, security architecture reviews, and risk assessment methodologies.
• Proven ability to influence engineering teams and translate security requirements into scalable technical solutions.
• Excellent communication skills in English.

Условия:

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams
• Fast moving
• Bold thinking
• Constant growth
• Meaningful impact
• Trust and real ownership
• Opportunity to shape the future of AI