Security Solutions Engineer

The role The role We are seeking a Security Solutions Engineer with a strong background in strategic solution evaluation, vendor assessment, and hands-on Proof-of-Concept (PoC) validation. This role is a crucial bridge between identifying customer security requirements and implementing best-in-class, enterprise-grade solutions. You will be responsible for defining the criteria, researching the market, and executing technical validation for all major security tooling and services adopted by the company. Key responsibilities: 1. Strategic Research & Requirement Definition Threat-to-Solution Mapping: Proactively analyze customer expectations, regulatory/compliance drivers, and threat models to define precise functional and non-functional requirements for new security solutions. Market Analysis & Scouting: Conduct market scans to identify security products, platforms, and vendors across domains (CSPM/CNAPP, DLP, IAM/IGA, EDR/XDR, data security, Kubernetes security, and AI/ML security). Vendor Due Diligence: Evaluate vendors on technical capability, security posture, integration requirements, roadmap, data residency/compliance, and support quality. 2. Technical Validation & PoC Leadership PoC Planning & Design: Develop test plans and success criteria with quantitative metrics and attack coverage. Hands-on Environment Setup: Create isolated PoC environments mimicking production with cloud VPCs, Kubernetes clusters, IaC, and workloads. Testing & Analysis: Run security research methodologies to assess vendor solution effectiveness. Artifact Generation: Document findings with performance data and metrics. 3. Decision Support & Communication: Deliver data-driven reports and presentations to leadership with recommendations. Integration Planning: Work with Security Engineering, Platform/Infra, and DevOps for integration feasibility. Must-haves: 6+ years in Security Engineering/Architecture or Security Research with vendor management. Deep cloud security knowledge (AWS/Azure/GCP, Kubernetes, network segmentation, IaC, least privilege, identity security, confidential computing). Scripting/programming (Python, Go). Experience with two or more enterprise-grade security tools (SIEM/SOAR, EDR, Vulnerability Management, Secrets Management). PoC proficiency, reporting and communication skills. Nice-to-haves: cloud company experience, ISO 27001/SOC 2/GDPR, CISSP/CCSK or cloud certifications, proven security standards contributions. Benefits & Perks: Competitive compensation, career growth, flexibility, collaborative culture, opportunity to work on AI projects, international environment. What Nebius offers: equal opportunity employer with inclusive culture.