Security Engineer

• Build and lead a red team function within Product Security Team, hiring and developing offensive security engineers.
• Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases.
• Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively.
• Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack.
• Conduct targeted assessments of new products and infrastructure changes before they ship.
• Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance.
• Establish red team processes, tooling, and a methodology that scales as the platform grows.

Offensive Security Lead

• Guide and budget electronic physical security and connected device projects.
• Conduct surveys, audits, and develop reports to identify security gaps and recommend solutions.
• Ensure projects comply with our Clients’ policies and standards, manage vendors, and oversee full project lifecycle.
• Risk-Based Consulting to provide consulting services, conduct risk assessments, and ensure compliance with Global Security Design Requirements (GSDR).
• Project Management to oversee projects from inception to completion, ensuring adherence to standards, budgets, and timelines.
• Vendor Management to evaluate security vendor bids, manage compliance, and oversee deliverables.
• Reporting trackers and provide regular metrics and reports.
• Continuous Improvement to optimize processes, conduct after-action reviews, and contribute to technical document updates.
• Maintain clear communication with stakeholders and ensure project scope and deliverables are well understood.
• Gather and analyse information from different viewpoints before using your judgement to make effective informed decisions.

EMEA Security Consultant

• Own and improve the security of our platform, products and engineering delivery process, with a strong focus on application security, secure SDLC, cloud security and customer-facing compliance.
• Implement controls, fixes, tooling and detections directly - we are looking for a builder who does the work, not an advisor who hands it to others and waits.
• Work closely with Engineering, DevOps, Product and QA, and manage one internal Security Engineer who owns corporate, identity and endpoint security and supports you on day-to-day compliance.
• Lead application security across the product portfolio - threat modeling, secure design reviews, code-review support, and hands-on remediation work alongside developers.
• Embed security into the SDLC and CI/CD without creating unnecessary delivery friction. Build, own and tune security tooling (SAST, DAST, dependency and container scanning, secrets detection) and implement policy-as-code and pre-merge gates in our Terraform and Terragrunt pipelines yourself.
• Identify, validate, prioritize and remediate vulnerabilities in applications, APIs, infrastructure and third-party integrations, working hands-on with engineering and advising pragmatically on risk trade-offs.
• Own the security posture across AWS and Kubernetes - IAM and network design, encryption, logging baselines, configuration drift and cloud security posture management.
• Build and tune cloud detections (CloudTrail, GuardDuty, Security Hub), write runbooks, and act as the technical security lead for product and cloud incidents, partnering with DevOps for investigation and containment.
• Drive the security review of new features, architecture decisions, integrations and platform changes, especially where customer data, authentication, authorization or data-processing risks are involved.
• Manage, mentor and develop our internal Security Engineer, including 1:1s, performance reviews, leave approvals and day-to-day delegation. Corporate IT, identity and endpoint security are owned by them, not by you, so you can focus on product and cloud security.
• Own and drive our SOC 2 and ISO 27001 programs end to end - control design, evidence automation and primary auditor liaison - and maintain policies and control documentation in Confluence.

Senior Security Engineer

• Make Our Products Brilliant: Feed research directly into product and engineering — work close to the roadmap and the codebase to sharpen how we detect, prioritise, and remediate, building capabilities that outclass the competition
• Shape How Our AI Understands Risk: Translate deep threat research into the labels, signals, and product feedback that train our models to prioritise vulnerabilities like a seasoned researcher
• Lead Our Security Research Function: Set the direction, standards, and methodologies for how Maze researches, validates, and prioritises cloud and application security threats, scaling a small team of researchers as we grow
• Find Novel Vulnerabilities That Get Reach: Surface original research and build narratives — blog posts, technical talks, podcasts, video, conference presentations — that earn real reach and give Maze technical credibility with the security community
• Build Authoritative Technical Intelligence: Produce detailed research on exploitation techniques, attack vectors, and remediation across cloud infrastructure and application security, enriched with CVE, advisory, and threat-intel sources
• Set the Standard for Research Quality: Establish the frameworks and review processes that keep our vulnerability assessment consistent, defensible, and ahead of the threat landscape
• Grow the Bench: Mentor and develop researchers, raising the technical bar of the team and creating a research culture others want to join

Security Research Lead

• Guide and budget electronic physical security and connected device projects.
• Conduct surveys, audits, and develop reports to identify security gaps and recommend solutions.
• Ensure projects comply with Clients’ policies and standards, manage vendors, and oversee full project lifecycle.
• Provide consulting services, conduct risk assessments, and ensure compliance with Global Security Design Requirements (GSDR).
• Oversee projects from inception to completion, ensuring adherence to standards, budgets, and timelines.
• Evaluate security vendor bids, manage compliance, and oversee deliverables.
• Optimize processes, conduct after-action reviews, and contribute to technical document updates.
• Maintain clear communication with stakeholders and ensure project scope and deliverables are well understood.

• Lead the security of Alpen’s cloud infrastructure, production systems, internal platforms, and operational environments.
• Design, implement, and maintain security controls across AWS and cloud-native infrastructure.
• Lead infrastructure hardening initiatives across servers, containers, Kubernetes clusters, and cloud services.
• Drive identity and access management programs, including least-privilege access, RBAC, privileged access management, and secrets management.
• Own vulnerability management processes, remediation programs, and infrastructure security reviews.
• Build and improve security monitoring, detection engineering, alerting, and incident response capabilities.
• Investigate security incidents, conduct root-cause analysis, and lead response and recovery efforts.
• Develop and maintain incident response playbooks, operational procedures, and security runbooks.
• Partner with engineering teams to secure CI/CD pipelines, deployment workflows, and developer platforms.
• Review infrastructure architecture and operational changes to identify and mitigate security risks.
• Automate security controls and integrate security tooling into engineering workflows.
• Conduct threat modeling and architecture reviews for infrastructure and platform services.
• Support endpoint security, device management, vendor security assessments, and internal security initiatives.
• Establish security metrics, reporting, and visibility into operational risk across the organization.
• Collaborate effectively within a globally distributed team.

Security Engineer jobs in Europe

See all jobs on JobTailor

Offensive Security Lead

EMEA Security Consultant

Senior Security Engineer

Security Research Lead

EMEA Security Consultant

Infrastructure Security Engineer