Information Security Engineer

The company

Nebius AI is an AI-centric public cloud platform specifically crafted to serve AI models for training and inference.

Our mission is to help ML practitioners concentrate on their core jobs, while DevOps, MLOps, and infrastructure-related tasks are handled by us. The idea is to build an ML-specific cloud platform covering the entire ML lifecycle from A to Z: from data preparation and labeling to ML training and inference.

We recognize the potential of ML and AI technologies and aim to provide our future users with the perfect environment to train and fine-tune their models. We are committed to delivering the best user experience and excellent customer support.

Four development hubs:

Nebius is headquartered in the Netherlands, with hubs in Finland, Serbia, and Israel.

Data center in Europe:

Our own data center in Finland features server racks designed in-house for ML-specific high load, with power-efficient solutions, including a free-cooling system.

500+ professionals:

Our mature team of engineers has a proven track record in developing sophisticated cloud and ML solutions and designing cutting-edge hardware.

The role

We are looking for an Information Security Engineer with expertise in infrastructure and cloud security to join our team.

In this role, you will play a crucial part in safeguarding our organization's digital assets, cloud platform and sensitive data. You will design, implement, and manage security measures, conduct incident response, ensure compliance with industry standards, and collaborate with cross-functional teams to integrate security tools and standards into the development and business processes.

You’re welcome to work in our office in Tel Aviv.

In this position, your responsibility will be to:

• Collaborate with cross-functional teams to plan, design, and implement enterprise-class security systems in alignment with the organization's overall security objectives. Evaluate existing IT infrastructure to identify potential vulnerabilities and implement appropriate security controls.
• Configure, monitor, and maintain cybersecurity tools to protect the organization's IT systems from unauthorized access and external threats.Regularly review and update system security settings, implement best practices, and optimize configurations for maximum security.
• Conduct regular vulnerability assessments to identify vulnerabilities and prioritize remediation efforts and track vulnerability management.
• Implement security configurations on systems to reduce the attack surface and minimize potential security risks. Apply industry best practices for system hardening, including disabling unnecessary services and securing management interfaces.
• Implement and manage access control mechanisms to restrict unauthorized access to critical resources and data. Ensure proper user authentication and authorization mechanisms are in place.
• Maintain accurate documentation of system security configurations, procedures, and incidents. Generate regular reports on system security metrics, vulnerabilities, and incident response activities. Provide management with comprehensive reports on the state of systems security and recommendations for improvement.
• Design and implement security measures for clients, including on cloud platforms, and educate them on establishing effective security operations to protect the platforms they manage.
• Work closely with DevOps and development teams to integrate security into the software development lifecycle, promoting a culture of security by design.

We expect you to have:

• Proven work experience as an Infrastructure\Information Security Engineer or a similar role.
• Deep understanding of cybersecurity principles, technologies, protocols and secure system configuration practices.
• Knowledge of cloud computing concepts and architectures, particularly with major providers such as AWS, Azure, and GCP. Familiarity with cloud security services, IAM, cloud-specific security challenges and security best practices.
• Experience in securing Microsoft environments – Azure, Office 365, Windows OS.
• Experience with conducting vulnerability assessments and driving remediation efforts.
• Experience working with development teams and good understanding of SSDLC and CI\CD processes.
• Excellent communication skills to effectively convey security concepts to both technical and non-technical stakeholders, and ability to collaborate with cross-functional teams.
• Exceptional problem-solving abilities and the capacity to work effectively in dynamic environments.

It would be an added bonus if you had:

• A Bachelor's degree in a relevant field (e.g., Computer Science, Cyber Security) or equivalent work experience.
• Professional certifications such as CISSP, CISM or CEH are preferred.
• Experience with identity management and governance concepts and tools (e.g. IDM, PAM, KMS).
• Experience with data security tools and methods such as DLP, DAM, DSPM, encryption, masking etc.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation.
• Familiarity with security frameworks and compliance standards (e.g., ISO 27001, NIST, SOC2, GDPR)

Does all that sound like your kind of challenge? Then join us!