{"id":2242472,"url":"https://alion.io/job/nebius-lead-detection-engineer","title":"Lead Detection Engineer","company":{"id":6364,"name":"Nebius","domain":"nebius.com","url":"https://alion.io/company/nebius","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":135,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":313000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":588},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-07-20T16:00:29Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-13T00:12:05Z","board_verified":true,"closed_at":null,"days_open":84,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":84},"description":"About Nebius:\nNebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.\nBuilt by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.\nListed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.\nThe role\nNebius is looking for a Lead Detection Engineer.This is an individual contributor role with full technical ownership. You'll set the direction for detection engineering: the standards, the tooling, the coverage strategy, and the automation that operationalizes it all. You'llwork closely with SOC analysts and Platform Engineering to make detection a first-class engineering discipline.\nYou’re welcome to work in our offices in Tel Aviv, Israel\nYour responsibilities will include: \nDetection coverage strategy across endpoint, identity, cloud, and infrastructure - how it's measured, prioritized, and continuously improved. \nDetection-as-Code pipeline: version control, testing, peer review, CI/CD, and deployment practices for all detection logic. \nArchitecture connecting detections to enrichment, triage, and automated response workflows. \nTechnical standards for how detections are designed, tested, documented, deployed, and retired. \nDetection quality: fidelity metrics, false positive reduction, coverage measurement, and continuous validation loops. \nDesign and build high-fidelity behavioral detections across SIEM and EDR platforms. \nResearch emerging attacker techniques and translate threat intelligence into scalable, evasion-resistant detections. \nValidate detections through threat simulations and continuous detection testing. \nPartner with SOC analysts to close the feedback loop between detections and real investigations. \nDefine and track detection engineering metrics; communicate coverage posture and effectiveness to security leadership. \nMake architectural decisions that scale as the team and organization grow. \nWe expect you to have: \nMinimum 3 years in detection engineering, security operations, or a hybrid offensive/defensive role - with demonstrated depth, not just breadth. \nExperience owning or leading detection engineering work as a senior technical contributor \nStrong understanding of attacker tradecraft and adversary behavior. \nHands-on experience with at least one enterprise SIEM and EDR platform - Splunk, Microsoft Sentinel, CrowdStrike, or equivalent. \nCloud security depth across Azure, AWS, or GCP. \nStrong query development skills in SPL, KQL, Sigma, or similar. \nStrong scripting skills (python, powershell etc)\nSolid engineering practices: Git, CI/CD, code review, Detection-as-Code workflows. \nExperience using MITRE ATT&CK to design, validate, and measure detection coverage \nAbility to make and defend technical decisions and establish standards others adopt. \nIt will be an added bonus if you have: \nOffensive security background or certifications. \nExperience with threat hunting and detection validation frameworks. \nExperience designing SOAR playbooks and automated response workflows. \nExperience building AI-assisted detection, investigation, or triage workflows. \nBenefits & Perks:\nCompetitive compensation\nCareer growth and learning opportunities\nFlexibility and ownership\nCollaborative and innovative culture\nOpportunity to work on impactful AI projects\nInternational environment and talented teams\nWhat's it like to work at Nebius:\nFast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI \nEqual Opportunity Statement:\nNebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.\nApplicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. \nIf you need accommodations during the application process, please let us know.","description_format":"text","description_chars":4738,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Commerce","Education","Data Centers & Colocation"],"lifecycle":[{"event":"open","at":"2026-10-11T01:05:42Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.38,"p_room":0.28,"age_days":83,"expected_fill_days":29,"reasons":["conf:0","stale_co","win:tail","crowd:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/nebius-lead-detection-engineer","json_url":"https://alion.io/job/nebius-lead-detection-engineer.json","meta":{"generated_at":"2026-10-13T00:19:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":460,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6364},"rest":"https://alion.io/mcp/rest/get_company?id=6364"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnebius-lead-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnebius-lead-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnebius-lead-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nebius-lead-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnebius-lead-detection-engineer"}]}