Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a integral footprint with R&D; hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.; Offensive security The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack. We're hiring an Offensive Security Engineer to join us at Nebius. You'll design and execute adversarial simulation across our cloud platform
- attacking the same infrastructure our customers depend on
- and translate findings into measurable security improvements. This is a hands-on engineering role within Product Security Team. You will be part of an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack. Validate and extend early-stage Secure SDLC threat models via continuous penetration testing , assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development.



Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases. Plan and execute full-scoped red team engagements against Nebius cloud platform
- including compute, storage, inference, networking, orchestration layers, and internal tooling. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively. Establish red team processes, tooling, and a methodology that scales as the platform grows. 6+ years in offensive security
- penetration testing, red teaming, or adversary simulation ~ Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes. ~ Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration. ~ Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar). ~ Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use. Application security experience Experience with cloud provider internals (hypervisor/networking layers). Presenting your security research at conferences like BlackHat/DefCon, etc. Attack surface that's genuinely novel
- GPU clusters, AI platforms, multi-tenant cloud at scale. Flexible, remote-first culture Recruiter's chat (30mins) ~ Security interview (60mins) to asses domain expertise ~ Security System Design interview (90mins) to assess practical experience ~(Optional) Technical deep dive (90mins) to present a complex and impact project. ~ Opportunity to work on impactful AI projects What's it like to work at Nebius:

📌 Security Engineer Services (España)
🏢 Nebius
📍 España