Вакансии

Location: Amsterdam, Netherlands; Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development. The role is responsible for defining and implementing security architecture principles, designing secure cloud-native environments, and embedding security throughout infrastructure provisioning and software development lifecycles. The successful candidate will combine deep technical expertise in Kubernetes and cloud security with proven team leadership, architectural design, and cross-functional collaboration skills. They will work closely with Cloud Engineering, DevOps, R&D, Platform Engineering, IT, and Security teams to ensure that security is built into the organization’s technology foundations. Your responsibilities will include: Cybersecurity Architecture Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. Translate threat models, business requirements, and risk assessments into practical security controls. Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. Establish security controls for container orchestration platforms across development, testing, and production environments. Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies. Ensure alignment with organizational security requirements and relevant industry standards. Secure Development and DevSecOps Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations. Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines. Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning. Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls. Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery. Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams. Security Engineering and Risk Management Develop technical security standards, architecture patterns, and security control baselines. Conduct threat modeling, attack-path analysis, architecture risk assessments, and security design reviews. Define security requirements for identity, access, data protection, network security, workload isolation, and observability. Collaborate with Security Operations to improve security telemetry, detection capabilities, and incident readiness. Evaluate emerging security technologies and recommend solutions based on risk reduction, operational effectiveness, and architectural fit. Track security findings and drive measurable improvements in the organization’s security posture. Team Leadership and Collaboration Lead, mentor, and develop a team of cybersecurity architects and security engineers. Define team strategy, technical priorities, delivery plans, and measurable performance indicators. Build effective partnerships with Cloud Engineering, DevOps, R&D, Platform Engineering, and other technology stakeholders. Communicate complex architectural risks and technical trade-offs to senior management and engineering leadership. Foster a culture of engineering excellence, automation, accountability, and continuous improvement. We expect you to have: 7+ years of experience in cybersecurity, security engineering, cloud security, or security architecture. 3+ years of experience managing technical teams or leading senior technical professionals. Strong practical knowledge of Kubernetes architecture and container security in production environments. Demonstrated experience securing cloud-native workloads and distributed systems. Strong expertise in AWS and/or Microsoft Azure security architecture. Hands-on understanding of Kubernetes RBAC, network policies, admission controllers, workload security, secrets management, and container runtime security. Experience with Docker or other container technologies, Kubernetes deployment workflows, and container registries. Strong understanding of cloud networking, IAM, encryption, key management, logging, and workload protection. Practical experience with Infrastructure as Code and automated security controls. Experience securing CI/CD pipelines and integrating security into software development processes. Knowledge of threat modeling, vulnerability management, security architecture reviews, and risk assessment methodologies. Proven ability to influence engineering teams and translate security requirements into scalable technical solutions. Excellent communication skills in English. Key Success Metrics Improved security posture and reduced attack surface across Kubernetes and cloud environments. Reduction in critical misconfigurations, excessive privileges, and recurring architectural vulnerabilities. Increased adoption of secure-by-design architecture patterns across engineering teams. Improved security coverage and automation across CI/CD pipelines and infrastructure provisioning. Reduced time to remediate critical security findings. Consistent implementation of Kubernetes and cloud security baselines. Improved collaboration between cybersecurity, cloud infrastructure, platform, and development teams. Development of a high-performing cybersecurity architecture team. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect to join the Cyber Security organization, reporting to the Security Architect Manager. This role focuses on designing and implementing secure architectures across corporate networks and cloud environments. You will play a key role in defining secure solutions, reviewing system designs, and ensuring security is embedded across enterprise infrastructure. The ideal candidate brings strong hands-on expertise in network and cloud security, along with the ability to work closely with IT, Infrastructure, DevOps, and Engineering teams to drive secure and scalable implementations. You’re welcome to work in our offices in Tel Aviv, Israel. Your responsibilities will include to: Design and implementing secure architectures across corporate networks, cloud platforms, and hybrid environments. Define and maintain security standards, guidelines, and reference architectures aligned with organizational requirements. Review and approve architecture and design of new systems, infrastructure, and network changes. Design and support secure enterprise network architectures, including segmentation, Zero Trust, and remote access solutions. Define and implement controls for firewalls, ZTNA, proxies, and network access control (NAC). Design secure cloud architectures including IAM, networking, and workload protection. Ensure proper implementation of cloud security controls such as segmentation, encryption, and monitoring. Define and support identity and access management controls, including SSO, MFA, and privileged access. Contribute to endpoint security architecture, including EDR/XDR and device hardening standards. Identify security risks and architectural gaps and recommend mitigation strategies. Participate in architecture reviews, risk assessments, and security design discussions. Collaborate with SOC, Vulnerability Management, IT, and Engineering teams to improve overall security posture. Support implementation of security architecture initiatives and improvements across the organization. Cybersecurity Architecture Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. Translate threat models, business requirements, and risk assessments into practical security controls. Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. Establish security controls for container orchestration platforms across development, testing, and production environments. Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies. Ensure alignment with organizational security requirements and relevant industry standards. Secure Development and DevSecOps Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations. Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines. Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning. Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls. Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery. Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams. Security Engineering and Risk Management Develop technical security standards, architecture patterns, and security control baselines. Conduct threat modeling, attack-path analysis, architecture risk assessments, and security design reviews. Define security requirements for identity, access, data protection, network security, workload isolation, and observability. Collaborate with Security Operations to improve security telemetry, detection capabilities, and incident readiness. Evaluate emerging security technologies and recommend solutions based on risk reduction, operational effectiveness, and architectural fit. Track security findings and drive measurable improvements in the organization’s security posture. We expect you to have: 6+ years of experience in cybersecurity, with a focus on cloud security, networks, and/or SDLC Experience working with cloud platforms (AWS, GCP, Azure) and cloud security best practices. Strong hands-on experience in enterprise network security (firewalls, segmentation, VPN, proxies, NAC, etc.). Solid understanding of identity and access management (IAM), Active Directory / Entra ID, and access control models. Experience working in hybrid environments (on-prem + cloud). Strong understanding of security architecture principles and risk-based design. Experience working cross-functionally with IT, Infrastructure, DevOps, and Engineering teams. Strong analytical and problem-solving skills. It will be an added bonus if you have: Experience with Zero Trust architecture and network segmentation strategies. Familiarity with cloud security tools (e.g., Wiz). Experience with enterprise identity platforms (Entra ID / Azure AD, Okta, etc.). Knowledge of regulatory and compliance frameworks (ISO 27001, SOC 2, NIST, etc.). Experience in SaaS, cloud-native, or enterprise-scale environments. Relevant certifications such as CISSP, CCSP, or equivalent. BSc in Computer Science, Information Security, or a related field. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Salt Lake City, Utah, United States About the Role iCapital is looking to a hire a Vice President to join the Platform Infrastructure team. This team plays a critical role in keeping the production and development environments running smoothly and securely.  This role will utilize advanced cloud capabilities to facilitate Platform Infrastructure strategy of market agility and lean operating principles with a strict focus on quality to meet the ever-growing demands of clients. The ideal candidate is highly collaborative, creative, intellectually curious and passionate about forming and implementing cutting-edge cloud computing capabilities. As a Platform Engineer, this individual will be wearing multiple hats in a highly visible role interacting with all aspects of the business. Responsibilities Build highly available solutions across the entire SDLC stack with a primary focus on an internet facing fintech site. Coordinate the relationship between the Platform Infrastructure team and the Information Security Team in remediating security issues related to platforms, CI/CD pipelines, or development tools. Contribute to security best practices for shifting security left and establishing a strong security culture within the DevOps and Platform Infrastructure team. Develop and maintain tools to support the development environment on MacOS and Linux tool environment with focus on improving developer productivity. Maintain site reliability with a focus on building highly scalable systems integrating resiliency and high availability at all levels. Develop software and tooling to secure and automate cloud infrastructure building software delivery capabilities with fully automatic workflows. Design and operate a Kubernetes environment for container management and orchestration. Qualifications 6+ years of DevOps or SRE experience with 4+ years of AWS experience 6+ years of CI/CD pipeline development in GitLab, GitHub, or similar frameworks 3+ years of experience with security best practices in AWS, including remediating SecurityHub findings 3+ years of experience with DevSecOps tools, including SAST tools, DAST tools, and SCA tools Microservices (Docker, Kubernetes) experience in a production environment is strongly desired Strong Linux OS-level and command-line and scripting knowledge and configuration management principles Working knowledge of databases such as MongoDB, Postgres, and DynamoDB Coding beyond simple scripting with strong opinions on maintainable and reusable code in Python, Ruby or Java is desired Experience with computer provisioning on a Cloud based platform using Terraform or Cloud formation Exceptional analytical skills and able to apply knowledge and experience in decision-making to arrive at creative and commercial solutions Experience building a Microservice based architecture Strong written and verbal communication skills Able to design and implement complex, but easily managed, automated infrastructure A desire to share, teach and learn as part of a team Expert level knowledge of networking Experience with distributed systems design, maintenance, and hands-on troubleshooting Experience with debugging issues with the FIX protocol to include maintaining and establishing fix sessions and or session management + order routing Experience in system tuning and performance testing AWS certifications are a plus Benefits The base salary range for this role is $150,000 to $170,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday. For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/ iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Location: Cyprus; Portugal; Spain; Latvia; Germany Intetics Inc. , a global technology company providing custom software application development, distributed professional teams, software product quality assessment, and “all-things-digital” solutions, is seeking a highly skilled and experienced Senior PHP Engineer to join our dynamic team. As a Senior PHP Developer at Intetics, you will be responsible for developing, maintaining, and enhancing web applications using PHP and related technologies. You will work closely with cross-functional teams to deliver high-quality software solutions that meet client requirements and industry best practices. The client is a leading company specializing in advanced cybersecurity solutions. They provide comprehensive security measures designed to protect sensitive data and systems from cyber threats. Their offerings include vulnerability management, threat intelligence, incident response, and compliance management. With cutting-edge technology and a team of experts, they ensure robust protection for organizations across various industries, helping clients stay ahead of evolving cyber threats and maintain a secure digital environment. About the project: The only Risk-Based Vulnerability Management Platform purpose-built for the world’s most complex enterprises. Requirements Minimum of 5 years of professional experience in PHP development Excellent knowledge of DB Extensive experience working with large volumes of data Experience in writing complex and optimized SQL queries Excellent knowledge of modern versions of PHP Experience working with relational databases (SingleStore/MemSQL a bonus) Experience maintaining applications on Linux platforms in cloud environments Background following Agile/Scrum methodologies in a professional setting Demonstrated experience with technical troubleshooting Ability to work independently and with a team, including with a team across different time zones Would be a plus: Experience working with vulnerability scanning technologies on any part of the tech stack (e.g., SCA, SAST, DAST, IAST, VM scanning, container, etc.) Experience working in cloud environments, ideally AWS Experience working with data analytics and/or data science Benefits Paid Time Off (36 paid days per year) Work From Home Training & Development Partial medical compensation

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software. The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will support one of these areas while contributing across others, with your focus shaped by your strengths and the team's priorities. Responsibilities: Build and maintain identity and secrets management systems, including credential issuance, rotation, and workload authentication across our multi-cloud environments Contribute to cluster security controls including RBAC policies, namespace isolation, workload identity, and pod security Implement and maintain cloud security controls including IAM, network segmentation, VPC architecture, and encryption across our multi-cloud and on-prem environments Design and implement secure development frameworks and libraries that make secure coding the path of least resistance for our engineering teams, including service to service authentication, serialization libraries, and tool proxies. Harden CI/CD pipelines against supply chain attacks through isolated build environments, signed attestations, dependency verification, and automated policy enforcement Identify and remediate security gaps through code review, threat modeling, and hands-on debugging Contribute to continuous cloud security posture management using infrastructure-as-code scanning, misconfiguration detection, and automated remediation You may be a good fit if you have: At least 5 years of software engineering experience implementing and maintaining security-relevant systems in production Bachelor's degree in Computer Science or equivalent industry experience Strong programming skills in Python or at least one systems language such as Go or Rust Experience contributing to cloud security controls A track record of taking ownership of problems end to end, from identifying the issue to shipping and monitoring the fix Clear communication skills and the ability to work collaboratively across engineering teams Low ego and high empathy, with a genuine interest in helping teammates succeed Passion for AI safety and the role security engineering plays in building trustworthy AI systems Strong candidates may also have: Contributions to developer security tooling including SAST, dependency scanning, or secure build infrastructure Familiarity with Kubernetes security primitives including RBAC, namespaces, network policies, and admission controllers Experience with cloud security posture management tooling, infrastructure-as-code security scanning, or automated remediation Experience with network security and isolation techniques including east-west controls, traffic inspection, and cloud network policy Experience with eBPF for security monitoring and enforcement, or developing kernel security policies Experience building secrets management or workload authentication systems, including familiarity with protocols such as OAuth 2.0, OIDC, SAML, or SPIFFE/SPIRE Background building or operating security systems in environments that support research workflows and rapid iteration Deadline to apply: None. Applications will be reviewed on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Worldwide We are looking for an Application Security Engineer to join our Information Security team. The Information Security team is responsible for protecting Plata’s products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development. As an Application Security Engineer , you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You’ll help embed security across the entire software development lifecycle — from design and development to testing and deployment — while continuously improving our application security practices. Challenges that await you: Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC Conduct security reviews & threat modeling. Analyze application architecture, define threat models, and drive proactive risk identification Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation Handle security incidents Implement “shifting left” strategies, enforce continuous testing, fast remediation, and embed security culture across teams Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards What makes you a great fit: Proficient in programming languages (web/mobile) Strong understanding of web architectures (microservices) Deep knowledge of OWASP Top 10, threat modeling, and security testing frameworks Familiarity with security tools such as ZAP, Dependency-Track, Burp Strong analytical skills with precise and thorough attention to detail Your bonus skills: Security certifications (OSCP, OSWE, GWAPT, GCPN) Contributions to or experience with bug bounty or ethical-hacking programs SaaS or cloud-native environments experience Familiarity with Kubernetes or container security Our ways of working: Innovative Spirit: A commitment to creativity and groundbreaking solutions Honest Feedback: valuing open, transparent communication Supportive Team: a strong, collaborative community Celebrating Achievements: recognizing our wins together High-Tech Environment : a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances Our benefits: Relocation support to Kazakhstan, Spain, Cyprus, or Georgia with full visa & permit support to the employee and family Flexible work from one of our offices or remote Healthcare Coverage Education Budget: Language lessons, professional training and certifications Wellness Budget: Mental health and fitness activity reimbursements Vacation Policy: Annual leave and paid sick leave as per applicable policies

Location: Remote - Europe About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Application Security The team is responsible for the security of Nebius's main public offerings : Compute, VPC, Managed K8s, Marketplace, Managed Soperator, and others. This includes building out the Secure SDLC , threat modeling, and vulnerability management platforms. The Role We are looking for an Senior/Staff Application Security Engineer who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC. What you will do Build and maintain Application Security Posture Management (ASPM) at the Company scale. Automate and support SAST, SCA tools, etc as part of CI/CD pipelines. Improving SAST, secrets detection rules. Keeping false positive rate low. Identify, analyze, and remediate application security vulnerabilities. Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC). Develop and maintain secure coding guidelines for development teams. Conduct, run threat modeling and risk assessments for new and existing applications. Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc. Stay updated on the latest security threats, vulnerabilities, and mitigation techniques. Serve as an application security subject matter expert to other teams. What we look for 6+ years of experience in application security. Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them. Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary. Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.). Understanding of authentication protocols like SAML or OIDC. Experience in conducting threat-modeling sessions. Bonus points Confidence in presenting your ideas and opinions in a manner that can be challenged, while responding well to feedback. Experience in designing, building, and maintaining security automation. Experience in translating compliance and regulation requirements into technical specifications. Experience in exploiting vulnerabilities in web applications, Linux kernels, containers, and networks. Security certifications such as OSCP or OSWE. Hiring process Recruiter's chat (30mins) Live-coding interview (60mins) to asses basic coding skills Security interview (60mins) to asses domain expertise Security System Design interview (90mins) to assess practical experience (Optional) Technical deep dive (90mins) to present a complex and impact project. Final interview to close the hiring process (45mins) #LI-CP1 Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.