Lead Detection Engineer
Tel Avivfull-timePosted 3mo ago
About the role
Lead Detection Engineer role at Nebius, an individual contributor position with full technical ownership focused on setting the direction for detection engineering, standards, tooling, coverage strategy, and automation, collaborating with SOC analysts and Platform Engineering.
Responsibilities
- Detection coverage strategy across endpoint, identity, cloud, and infrastructure — how it's measured, prioritized, and continuously improved.
- Detection-as-Code pipeline: version control, testing, peer review, CI/CD, and deployment practices for all detection logic.
- Architecture connecting detections to enrichment, triage, and automated response workflows.
- Technical standards for how detections are designed, tested, documented, deployed, and retired.
- Detection quality: fidelity metrics, false positive reduction, coverage measurement, and continuous validation loops.
- Design and build high-fidelity behavioral detections across SIEM and EDR platforms.
- Research emerging attacker techniques and translate threat intelligence into scalable, evasion-resistant detections.
- Validate detections through threat simulations and continuous detection testing.
- Partner with SOC analysts to close the feedback loop between detections and real investigations.
- Define and track detection engineering metrics; communicate coverage posture and effectiveness to security leadership.
- Make architectural decisions that scale as the team and organization grow.
Qualifications
- Minimum 3 years in detection engineering, security operations, or a hybrid offensive/defensive role — with demonstrated depth, not just breadth.
- Experience owning or leading detection engineering work as a senior technical contributor
- Strong understanding of attacker tradecraft and adversary behavior.
- Hands-on experience with at least one enterprise SIEM and EDR platform — Splunk, Microsoft Sentinel, CrowdStrike, or equivalent.
- Cloud security depth across Azure, AWS, or GCP.
- Strong query development skills in SPL, KQL, Sigma, or similar.
- Strong scripting skills (python, powershell etc)
- Solid engineering practices: Git, CI/CD, code review, Detection-as-Code workflows.
- Experience using MITRE ATT&CK to design, validate, and measure detection coverage.
Skills
Required:Detection engineering leadershipSIEM and EDR proficiencyCloud securityQuery languagesScriptingDetection-as-CodeMITRE ATT&CK
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
Last updated Oct 7, 2026. Interested? Apply on the company site.
About Nebius
The ultimate cloud for AI explorers
Discover the most efficient way to build, tune and run your AI models and applications on top-notch NVIDIA® GPUs.
AI CloudToken FactoryGPUKubernetesSlurmManaged servicesTerraformAPI
More open roles at Nebius
- Staff Machine Learning Engineer, LLM Inference Optimization4d agoHybrid (Remote/Hybrid across listed locations) · ML
- Staff Site Reliability engineer - Network infrastructure - APAC4d agoRemote · Network Infrastructure
- Engineering manager - Network infrastructure - APAC4d agoRemote · Network Infrastructure
- Staff Software engineer - Network infrastructure - APAC4d agoRemote · Network Infrastructure
- Transportation Logistics Specialist4d agoHybrid (Europe) · Infrastructure