All vacancies
Vulnerability Operation Center Lead
Nebius
Remote · EuropeSalary not disclosedfull-timeVerified recentlyOver a month oldNebius Careers
We're building a Vulnerability Operations Center from the ground up and need a senior practitioner to lead it. You'll own the full vulnerability management lifecycle - from detection through triage to remediation tracking and reporting - across Nebius' cloud infrastructure, product and hardware stack.
Responsibilities
- Improve and maintain automated vulnerability triaging capabilities and vulnerability data quality through data enrichment (internal and external intelligence feeds), quality metrics, AI-assisted triage, context-aware risk scoring, and vulnerability correlation/chaining.
- Hands-on validation and triaging of most critical/zero-days vulnerabilities
- Work closely with vulnerability data consumers and stakeholders across the organization to meet engineering, compliance, and regulatory requirements by delivering high-quality, actionable findings and driving effective remediation.
- Contribute to the development of internal platforms, including the Unified Vulnerability Management (UVM) system and the security orchestration platform, to automate core vulnerability management workflows and reduce manual effort.
- Identify current deficiencies in patch management, drive and oversee improvements across engineering teams and business units to improve remediation efficiency and reduce organizational risk
- Own vulnerability intake from all sources - scanners, bug bounty, threat intel feeds, and penetration tests
- Prioritize findings using risk-based frameworks (CVSS, EPSS, SSVC, asset criticality, exploitability context, business impact) and reduce false positive noise
- Drive remediation accountability across infrastructure, platform, and product engineering teams
- Identify, track and report vulnerability management metrics, present KPIs and trends to security leadership
- Coordinate response to critical/zero-day vulnerabilities, acting as the primary point of contact across security, engineering, and operations
Languages
- Work format
- Remote
- Seniority
- Lead
- Posted
- 15 Jul 2026 (2mo ago)
- Last verified
- 4 Oct 2026
