{"id":2039797,"url":"https://alion.io/job/nebius-offensive-security-engineer","title":"Offensive Security Engineer","company":{"id":6364,"name":"Nebius","domain":"nebius.com","url":"https://alion.io/company/nebius","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"InfiniBand","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SLURM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"vLLM","optional":false},{"name":"CVE","optional":true},{"name":"eBPF","optional":true}],"status":"live","first_seen_at":"2026-10-07T13:48:42Z","employer_posted_date":null,"last_verified_at":"2026-10-07T13:48:42Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Nebius:\nNebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.\n\nBuilt by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.\n\nListed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.\n\nOffensive securityThe internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack.\nThe RoleWe're hiring an Offensive Security Engineer to join us at Nebius. You'll design and execute adversarial simulation across our cloud platform - attacking the same infrastructure our customers depend on - and translate findings into measurable security improvements.\nThis is a hands-on engineering role within Product Security Team. You will be part of an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack.\nWhat you’ll do\nValidate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases.\n\nPlan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively.\n\nResearch novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack\n\nConduct targeted assessments of new products and infrastructure changes before they ship.\n\nDeliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance.\n\nEstablish red team processes, tooling, and a methodology that scales as the platform grows.\n\nWhat we’re looking for \n\n6+ years in offensive security - penetration testing, red teaming, or adversary simulation \n\nDeep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes.\n\nStrong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration.\n\nProficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar).\n\nExperience running purple team exercises and working constructively with blue teams.\n\nAbility to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use.\n\nNice to have\nExperience attacking ML infrastructure, model serving pipelines, or GPU clusters.\n\nReverse engineering and exploits development experience\n\nApplication security experience\n\nFamiliarity with eBPF bypass techniques or kernel-level exploitation.\n\nBackground in vulnerability research or CVE discovery.\n\nExperience with cloud provider internals (hypervisor/networking layers).\n\nPresenting your security research at conferences like BlackHat/DefCon, etc.\n\nWhy this role at Nebius\n\nAttack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale.\n\nWork alongside world-class engineers on infrastructure that powers frontier AI.\n\nCompetitive compensation with equity upside in a Nasdaq-listed, high-growth company.\n\nFlexible, remote-first culture\n\nHiring process\nRecruiter's chat (30mins)\n\nLive-coding interview (60mins) to asses basic coding skills \n\nSecurity interview (60mins) to asses domain expertise\n\nSecurity System Design interview (90mins) to assess practical experience\n\n(Optional) Technical deep dive (90mins) to present a complex and impact project. \n\nFinal interview to close the hiring process (45mins)\n\nBenefits & Perks:\n\nCompetitive compensation\n\nCareer growth and learning opportunities\n\nFlexibility and ownership\n\nCollaborative and innovative culture\n\nOpportunity to work on impactful AI projects\n\nInternational environment and talented teams\n\nWhat's it like to work at Nebius:\nFast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI \n\nEqual Opportunity Statement:\nNebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.\n\nApplicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. \n\nIf you need accommodations during the application process, please let us know.\n\nOriginally posted on Himalayas","description_format":"text","description_chars":6103,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Artificial Intelligence","Commerce","Education"],"lifecycle":[{"event":"open","at":"2026-10-07T17:28:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["seen:0","win:early"],"computed_at":"2026-10-08T01:54:17Z"},"pay":null,"html_url":"https://alion.io/job/nebius-offensive-security-engineer","json_url":"https://alion.io/job/nebius-offensive-security-engineer.json","meta":{"generated_at":"2026-10-08T01:54:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3275,"day_limit":5000,"remaining_today":1725,"minute_limit":60,"resets_at":"2026-10-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6364},"rest":"https://alion.io/mcp/rest/get_company?id=6364"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnebius-offensive-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnebius-offensive-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnebius-offensive-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nebius-offensive-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnebius-offensive-security-engineer"}]}