Vulnerability Operation Center Lead

Role description

Role Overview

The Vulnerability Operation Center Lead will own the full vulnerability management lifecycle - from detection through triage to remediation tracking and reporting - across Nebius' cloud infrastructure, product and hardware stack. This is a high-impact role with big ownership: you'll define processes, select tooling, work directly with engineering teams, and set the standard for how Nebius responds to vulnerabilities.

What You Will Do

Improve and maintain automated vulnerability triaging capabilities and vulnerability data quality through data enrichment, quality metrics, AI-assisted triage, context-aware risk scoring, and vulnerability correlation/chaining. Work closely with vulnerability data consumers and stakeholders across the organization to meet engineering, compliance, and regulatory requirements.

Why It Might Be a Fit

You'll have the opportunity to build a Platform Security Vulnerability program from scratch and get to build and lead your own team while doing it. You'll work alongside world-class engineers on infrastructure that powers frontier AI.

Requirements

• 5–8 years in information security with at least 3 years focused on vulnerability management or security operations
• Deep familiarity with vulnerability scanning tools and their strengths/limitations in cloud-native environments
• Strong grasp of CVE/NVD, CVSS scoring, EPSS, SSVC and how to apply them to real-world prioritization
• Experience managing vulnerabilities across IaaS/cloud infrastructure (AWS, GCP, Azure, or private cloud) - experience with GPU/HPC environments is a plus
• Deep understanding of vulnerability sources limitations and corner cases for different vulnerability classes
• Able to write and review code (ability or willingness to develop in Golang) - well enough to assess exploitability, validate fixes, and build lightweight automation
• Strong grasp of common vulnerability classes at the code and infrastructure level
• Comfortable feeding well-documented vulnerability patterns into AI-assisted code review workflows and critically evaluating the output
• Track record of working cross-functionally with engineering teams and holding stakeholders accountable to timelines without being a bottleneck
• Strong written and verbal communication - able to translate technical risk into business impact for non-security audiences

Benefits

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams