Detection Engineering & Response Lead

Lead detection development: maintain low false-positive and false-negative rates. Work with 20+ teams to keep noise down and signal high. Architect detection coverage across cloud and bare-metal environments. Build and extend internal D&R tools and pipelines. Integrate threat intelligence into detection logic and IR playbooks. Lead incident response end-to-end. Partner with Compliance and Engineering. Define and report on D&R metrics. Build and maintain Security Incident Response program. Build tools, runbooks, and on-call processes. What we look for: 6+ years in security operations or incident response; 1–2 years leading a team; cloud-native experience (Kubernetes, Linux); SIEM detections (Chronicle, Splunk, Elastic); SOAR workflows; threat intelligence frameworks; memory forensics; stakeholder management. Nice to have: AI/ML and GPU threats; eBPF-based detection; threat hunting. Why Nebius: scale to global infra, evolve D&R platform into cloud security product, world-class engineers, equity, flexible remote-first culture.

The text above is the employer's original job description, extracted as written. Other details on this page, like salary, responsibilities, and requirements, are interpreted from that text by our system, not values the employer explicitly confirmed, so treat them as our best interpretation rather than verified facts.