Offensive Security Lead

Responsibilities

• Build and lead a red team function within Product Security Team, hiring and developing offensive security engineers.
• Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual…
• Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling.
• Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively.
• Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess…
• Conduct targeted assessments of new products and infrastructure changes before they ship.
• Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance.
• Establish red team processes, tooling, and a methodology that scales as the platform grows.

Languages