Incident Response Lead
Nebius — Tel-Aviv, Tel-Aviv District, Israel · Remote · Senior
Role description
Role Overview
Nebius is seeking a deeply technical Incident Response Lead to build and lead the company’s global incident response capability. The Lead will grow and direct a follow-the-sun team of responders across EMEA, Asia, and APAC, owning response execution and quality across Nebius’ cloud, infrastructure, and platform environments.
What You Will Do
The Lead will build and lead Nebius’ global IR capability, select and mature DFIR tooling, and establish the playbooks and follow-the-sun operating model across EMEA, Asia, and APAC. The Lead will also lead the technical response to major incidents hands-on and personally conduct end-to-end forensic investigations across cloud, platform, and endpoint environments.
Why It Might Be a Fit
The ideal candidate will have 8+ years of hands-on incident response and digital forensics experience, including technical leadership of large-scale, high-impact incidents. The candidate will also have experience building or leading IR teams and capabilities in cloud or infrastructure-heavy environments.
Requirements
- 8+ years of hands-on incident response and digital forensics experience
- Experience building or leading IR teams and capabilities in cloud or infrastructure-heavy environments
- Deep knowledge of Windows and Linux internals
- Strong cloud-native platform security
- Fluency in attacker TTPs (MITRE ATT&CK)
- Hands-on experience with EDR, SIEM, and forensic tooling
- Strong scripting and data-analysis skills (Python, PowerShell, SQL/KQL)
- Proven ability to lead under pressure and make high-quality decisions with incomplete data
- Clear, concise communication skills
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams