Requirements

• 6+ years in offensive security - penetration testing, red teaming, or adversary simulation
• Deep experience attacking cloud-native environments
• Strong fundamentals across the attack lifecycle
• Proficiency developing custom tooling and post-exploitation capabilities
• Experience running purple team exercises and working with blue teams
• Ability to write clear, senior-level reports with business-contextualized risk

Nice to have

• Experience attacking ML infrastructure, model serving pipelines, or GPU clusters
• Reverse engineering and exploits development experience
• Application security experience
• Familiarity with eBPF bypass techniques or kernel-level exploitation
• Background in vulnerability research or CVE discovery
• Experience with cloud provider internals
• Presenting security research at conferences like BlackHat/DefCon

What you'll be doing

• Validate and extend early-stage Secure SDLC threat models via continuous penetration testing
• Plan and execute full-scoped red team engagements against Nebius cloud platform
• Research novel attacks against GPU infrastructure, inference stack, and AI platform managed services
• Conduct targeted assessments of new products and infrastructure changes
• Deliver clear, actionable reports for technical audiences and leadership
• Establish red team processes, tooling, and methodology

Perks and benefits

• Competitive compensation with equity upside
• Career growth and learning opportunities
• Flexible, remote-first culture
• Collaborative and innovative work environment
• Opportunity to work on impactful AI projects
• International environment with talented teams