Security Engineering Lead

nebius; United States; Remote; USD 130,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation package

Career growth in an international,coll

Job summary

nebius is seeking a senior technical lead in cybersecurity focused on hands-on engineering and execution across corporate, cloud, and SaaS environments. You will work within a broader security function supporting AI and cloud workloads, collaborating with IT, Engineering, Product, and GRC teams.

The role emphasizes engineering, configuration, and operation of controls with strategic planning and practical implementation in a fast-moving organization.

Qualifications

• Six+ years in IT security across system, network, information, or cyber domains with at least three years in security engineering.
• Experience securing data across cloud and SaaS environments, including shadow IT and unmanaged data stores.
• Proven hands-on configuration and administration of enterprise security platforms.
• Strong understanding of IAM and data access governance principles.
• Ability to work cross-functionally with Security, IT, Engineering, Product, and GRC stakeholders.
• Hands-on experience with multiple security technologies listed in the requirements.

Responsibilities

• Engineer, deploy, and tune identity and access, threat detection and response, cloud, and network security systems.
• Author and enforce security configurations for endpoints, email, SaaS, network, and cloud platforms.
• Build solutions that surface continuous visibility into sensitive data and exposure risks across multi-cloud environments.
• Monitor, triage, and investigate alerts, partnering with Security, IT, and Network teams on escalation and remediation.
• Conduct risk assessments and identify gaps in controls spanning systems, pipelines, and business processes.
• Support compliance initiatives tied to GDPR, ISO 27001, and SOC 2.
• Maintain documentation, runbooks, and guidelines for operations and security posture management.

Skills

Identity & Access Management

Security engineering

Cloud security

Data governance

Cross-functional collaboration

Threat detection & response

Education

Degree in Computer Science or related field

CISSP or CISM (certifications)

Tools

XDR

SIEM

SOAR

CASB

PAM

DLP

Job description

Role overview

A senior technical lead position within a corporate cyber security organization, focused on hands‑on engineering and execution rather than people management. The role blends strategic security planning with the practical work of building, configuring, and operating the controls that protect corporate, cloud, and SaaS environments. It sits within a broader security function supporting AI and cloud infrastructure workloads, collaborating across IT, Engineering, Product, and GRC teams.

Responsibilities

• Engineer, deploy, and continuously tune identity and access, threat detection and response, cloud, and network security systems.
• Author and enforce security configurations for endpoints, email, SaaS, network, and cloud platforms.
• Build solutions that surface continuous visibility into sensitive data, data flows, misconfigurations, and exposure risks across multi‑cloud environments.
• Monitor, triage, and investigate alerts, partnering with Security, IT, and Network teams on escalation and remediation.
• Conduct risk assessments and identify gaps in controls spanning systems, pipelines, and business processes.
• Support compliance initiatives tied to frameworks such as GDPR, ISO 27001, and SOC 2.
• Maintain documentation, runbooks, and guidelines for operations and security posture management.

Requirements

• Six or more years in IT security across system, network, information, or cyber domains, including at least three years in a dedicated security engineering role.
• Proven hands‑on experience with enterprise security platforms, including policy authoring, tuning, incident workflow configuration, and platform administration.
• Background securing data across cloud and SaaS environments, including shadow IT and unmanaged data stores.
• Strong grasp of identity and access management and data access governance principles.
• Demonstrated ability to work cross‑functionally with Security, IT, Engineering, Product, and GRC stakeholders.
• Hands‑on experience with multiple security technologies such as XDR, SWG, DLP, email security, firewalls, NAC, NDR, IGA, CASB, PAM, EPM, BAS, vulnerability scanners, SIEM, SOAR, CTI, patch management, TPRM, and EASM.
• Strong written and verbal communication skills in English, with a proactive and ownership‑driven mindset.

Nice to have

• Experience building or scaling a security program in a fast‑growing organization.
• Familiarity with cloud‑native security services on AWS, Azure, or Google Cloud.
• Working knowledge of privacy and regulatory frameworks including GDPR, ISO 27001, and SOC 2.
• Scripting or automation skills in Python or PowerShell.
• Relevant certifications such as CISSP or CISM.
• Degree in Computer Science, Information Security, or a related field.

Benefits and work setup

• Competitive compensation package.
• Career growth and learning opportunities within an international, collaborative environment.
• Flexible working approach with a high degree of ownership over technical decisions.
• Exposure to impactful AI and cloud infrastructure projects alongside distributed engineering teams.