Offensive Security Engineer

Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack

• Conduct targeted assessments of new products and infrastructure changes before they ship.

• Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance.

• Establish red team processes, tooling, and a methodology that scales as the platform grows.

What we’re looking for

• 6+ years in offensive security - penetration testing, red teaming, or adversary simulation

• Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes.

• Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration.

• Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar).

• Experience running purple team exercises and working constructively with blue teams.

• Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use.

Nice to have

• Experience attacking ML infrastructure, model serving pipelines, or GPU clusters.

• Reverse engineering and exploits development experience

• Application security experience

• Familiarity with eBPF bypass techniques or kernel-level exploitation.

• Background in vulnerability research or CVE discovery.

• Experience with cloud provider internals (hypervisor/networking layers).

• Presenting your security research at conferences like BlackHat/DefCon, etc.

Why this role at Nebius

• Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale.

• Work alongside world-class engineers on infrastructure that powers frontier AI.

• Competitive compensation with equity upside in a Nasdaq-listed, high-growth company.

• Flexible, remote-first culture

Hiring process

• Recruiter's chat (30mins)

• Live-coding interview (60mins) to asses basic coding skills

• Security interview (60mins) to asses domain expertise

• Security System Design interview (90mins) to assess practical experience

• (Optional) Technical deep dive (90mins) to present a complex and impact project.

• Final interview to close the hiring process (45mins)

Benefits & Perks:

• Competitive compensation

• Career growth and learning opportunities

• Flexibility and ownership

• Collaborative and innovative culture

• Opportunity to work on impactful AI projects

• International environment and talented teams

What's it like to work at Nebius :

Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI

Equal Opportunity Statement:

Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.

Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.

If you need accommodations during the application process, please let us know.

Originally posted on Himalayas

• Offensive Security Engineer
• Penetration Tester
• Red Team Engineer
• Security Researcher

Source: Himalayas