Offensive Security Engineer
Nebius — Amsterdam, North Holland, Netherlands · In-Person · Senior
Role description
Role Overview
The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack.
What You Will Do
Design and execute adversarial simulation across our cloud platform, attacking the same infrastructure our customers depend on, and translate findings into measurable security improvements.
Why It Might Be a Fit
Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale.
Requirements
- 6+ years in offensive security - penetration testing, red teaming, or adversary simulation
- Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes.
- Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration.
- Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar).
- Experience running purple team exercises and working constructively with blue teams.
- Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use.
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams