Vulnerability Operations Lead - Cloud AI Security

Nebius; United States; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Career growth and learning

Flexibility and ownership

International environment

Remote-first culture

Job summary

Nebius is seeking a senior practitioner to build and lead a Vulnerability Operations Center. You will own the full vulnerability lifecycle across Nebius' cloud, product, and hardware stack, defining processes, selecting tooling, and coordinating with engineering teams to improve remediation and risk management.

You will triage critical vulnerabilities, collaborate with stakeholders, and contribute to platform security initiatives while enabling automation and AI-assisted analysis.

Qualifications

• 5–8 years in information security with at least 3 years in vulnerability management or security operations.
• Familiarity with vulnerability scanning tools and cloud-native environments.
• Understanding CVE/NVD, CVSS, EPSS, SSVC for prioritization.
• Experience managing vulnerabilities across IaaS/cloud infra (AWS/GCP/Azure).
• Ability to write/review code (Golang) to assess exploitability and build automation.

Responsibilities

• Improve automated vulnerability triaging capabilities and data quality via enrichment, metrics and AI-assisted triage.
• Validate and triage critical/zero-day vulnerabilities hands-on.
• Collaborate with stakeholders to deliver actionable findings and drive remediation.
• Contribute to internal platforms to automate vulnerability management workflows.
• Own vulnerability intake from scanners, bug bounty, threat intel and tests.
• Prioritize findings using risk-based frameworks and reduce false positives.
• Drive remediation accountability across infra, platform and product teams.
• Track and report vulnerability metrics and KPIs to security leadership.
• Coordinate response to critical vulnerabilities as primary contact across teams.
• Define and maintain integration between VOC tooling and broader security ecosystem.

Skills

Security operations

Vulnerability management

Cross-functional collaboration

Golang coding

Technical communication

Tools

Kubernetes security

Vulnerability scanners

Threat intel feeds

Job description

Nebius is seeking a senior practitioner to build and lead a Vulnerability Operations Center. You will own the full vulnerability lifecycle across Nebius' cloud, product, and hardware stack, defining processes, selecting tooling, and coordinating with engineering teams to improve remediation and risk management.

You will triage critical vulnerabilities, collaborate with stakeholders, and contribute to platform security initiatives while enabling automation and AI-assisted analysis.