Offensive Security Engineer
AI
Nebius is hiring an Offensive Security Engineer to join its internal red team in Amsterdam. The role involves designing and executing adversarial simulations, penetration testing, and offensive research across the Nebius cloud platform, requiring 6+ years of offensive security experience and deep cloud-native attack expertise.
What you'll do
- Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases.
- Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively.
- Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack
What you need
Must-have
Penetration TestingRed TeamingAdversary SimulationKubernetesCloud IAMVirtualizationContainer EscapesPython
Nice-to-have
Machine Learning InfrastructureModel Serving PipelinesGPU ClustersReverse EngineeringExploit DevelopmentApplication SecurityeBPFKernel-level Exploitation
Soft skills
CollaborationCommunicationReport WritingConstructive Teamwork
Offensive SecurityRed TeamPenetration TestingCloud SecurityAI InfrastructureKubernetesGPUAmsterdamHybridSenior