← All roles

Vulnerability Operation Center Lead

Nebius· Platform Security
Apply on company site
Hybrid (Remote - Europe)full-timePosted 3mo ago

About the role

Senior practitioner to lead Nebius's Vulnerability Operations Center, owning the full vulnerability management lifecycle across cloud infrastructure, product, and hardware. Build processes, select tooling, collaborate with engineering, and set standards for vulnerability response.

Responsibilities

  • - Improve and maintain automated vulnerability triaging capabilities and vulnerability data quality through data enrichment, quality metrics, AI-assisted triage, context-aware risk scoring, and vulnerability correlation/chaining.
  • - Hands-on validation and triaging of most critical/zero-days vulnerabilities
  • - Work with vulnerability data consumers and stakeholders to deliver high-quality, actionable findings and drive remediation meeting engineering, compliance, and regulatory requirements
  • - Contribute to internal platforms (Unified Vulnerability Management system and security orchestration platform) to automate core vulnerability management workflows
  • - Identify deficiencies in patch management and drive improvements across engineering teams and business units
  • - Own vulnerability intake from all sources (scanners, bug bounty, threat intel feeds, and penetration tests)
  • - Prioritize findings using risk-based frameworks (CVSS, EPSS, SSVC, asset criticality, exploitability context, business impact) and reduce false positives
  • - Drive remediation accountability across infrastructure, platform, and product engineering teams
  • - Identify, track and report vulnerability management metrics, present KPIs and trends to security leadership
  • - Coordinate response to critical/zero-day vulnerabilities as primary point of contact across security, engineering, and operations
  • - Define and maintain integration between VOC tooling and the broader security ecosystem.

Qualifications

  • - 5–8 years in information security with at least 3 years focused on vulnerability management or security operations
  • - Deep familiarity with vulnerability scanning tools and their strengths/limitations in cloud-native environments
  • - Strong grasp of CVE/NVD, CVSS scoring, EPSS, SSVC and how to apply them to real-world prioritization
  • - Experience managing vulnerabilities across IaaS/cloud infrastructure (AWS, GCP, Azure, or private cloud); GPU/HPC experience a plus
  • - Deep understanding of vulnerability sources limitations and corner cases for different vulnerability classes
  • - Able to write and review code (ability or willingness to develop in Golang) to assess exploitability, validate fixes, and build lightweight automation
  • - Strong grasp of common vulnerability classes at code and infrastructure level
  • - Comfortable feeding vulnerability patterns into AI-assisted code review workflows and evaluating output
  • - Track record of cross-functional collaboration with engineering teams and accountability for timelines
  • - Strong written and verbal communication for translating technical risk to business impact

Skills

Required:Vulnerability managementIncident response coordinationThreat intelligence and data enrichmentAutomation and scripting

Benefits

  • - Competitive compensation
  • - Career growth and learning opportunities
  • - Flexibility and ownership
  • - Collaborative and innovative culture
  • - Opportunity to work on impactful AI projects
  • - International environment and talented teams
Last updated Oct 7, 2026. Interested? Apply on the company site.
Nebius logo

About Nebius

The ultimate cloud for AI explorers

Discover the most efficient way to build, tune and run your AI models and applications on top-notch NVIDIA® GPUs.

AI CloudToken FactoryGPUKubernetesSlurmManaged servicesTerraformAPI
Company profileWebsite

More open roles at Nebius