RemoteLeaf Logo
Log in Sign up

Offensive Security Lead

2 months, 3 weeks ago
Europe
Full-time
Lead
Penetration Tester
DevOps and Infrastructure
Go Kubernetes Penetration Testing Python
Apply Now
Nebius

Nebius

Nebius enables B2B companies to build local hyperscaling cloud platforms with cost-effective GPUs, InfiniBand network, and 50% less compute cost. They offer managed Kubernetes and a launch-ready business model for innovative cloud solutions.

Internet Software & Services
51-250
View All Jobs 76

Description

  • Build and lead a red team function within the Product Security Team, including hiring and developing offensive security engineers.
  • Validate and extend Secure SDLC threat models through continuous penetration testing and automated checks.
  • Plan and execute full-scoped red team engagements across compute, storage, inference, networking, orchestration layers, and internal tooling.
  • Research novel attacks against GPU infrastructure, the inference stack, and AI platform managed services.
  • Assess tenant-isolation boundaries and identify low-level paths to break them.
  • Conduct targeted assessments of new products and infrastructure changes before release.
  • Work with Detection & Response and other security engineering teams to run purple team exercises and close detection gaps.
  • Deliver clear, actionable reports for technical audiences and leadership with prioritized findings and remediation guidance.
  • Establish red team processes, tooling, and a scalable methodology as the platform grows.

Requirements

  • 6+ years of experience in offensive security, including penetration testing, red teaming, or adversary simulation.
  • At least 1-2 years of experience leading or mentoring a team.
  • Deep experience attacking cloud-native environments, including Kubernetes privilege escalation, cloud IAM abuse, virtualization, and container escapes.
  • Strong fundamentals across the attack lifecycle, including initial access, persistence, lateral movement, and data exfiltration.
  • Proficiency developing custom tooling and post-exploitation capabilities in Python, Go, or similar languages.
  • Experience running purple team exercises and collaborating constructively with blue teams.
  • Ability to write clear senior-level reports with business-contextualized risk that engineers can easily use.
  • Experience attacking ML infrastructure, model serving pipelines, or GPU clusters is preferred.
  • Reverse engineering and exploit development experience is preferred.
  • Application security experience is preferred.
  • Familiarity with eBPF bypass techniques or kernel-level exploitation is preferred.
  • Background in vulnerability research or CVE discovery is preferred.
  • Experience with cloud provider internals, such as hypervisor or networking layers, is preferred.
  • Experience presenting security research at conferences like BlackHat or DefCon is preferred.
  • Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility as a condition of hire.

Benefits

  • Competitive compensation with equity upside in a Nasdaq-listed, high-growth company.
  • Flexible, remote-first culture.
  • Career growth and learning opportunities.
  • Flexibility and ownership in day-to-day work.
  • Collaborative and innovative culture.
  • Opportunity to work on impactful AI projects.
  • International environment with talented teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
4 hours, 58 minutes ago
DoorDash

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

United States Full-time Senior Penetration Tester
$164k-$242k
CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
1 day, 3 hours ago
Aspenview Technology Partners

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

United States Full-time Lead Penetration Tester
AWS Azure Elasticsearch GCP Linux SIEM Splunk
4 days, 3 hours ago
Invicti

Staff Security Researcher (Europe Remote)

Invicti 251-1K Internet Software & Services

Invicti Security is hiring a hands-on Offensive Security Researcher in Europe to research emerging web, cloud, and AI threats and turn findings into accurate, production-ready detection capabilities.

Europe Full-time Lead Penetration Tester
Burp Suite GraphQL HTTP JavaScript Kubernetes Nmap Python REST API
4 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers