Build and run Nebius' red team capability, leading a red team function within Product Security Team, designing and executing adversarial simulations across the Nebius cloud platform.
Compensation
Competitive compensation with equity upside in a Nasdaq-listed, high-growth company.
Responsibilities
Build and lead a red team function within Product Security Team, hiring and developing offensive security engineers.
Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development.
Plan and execute full-scoped red team engagements against Nebius cloud platform, including compute, storage, inference, networking, orchestration layers, and internal tooling.
Research novel attacks against GPU infrastructure, inference stack, and AI platform managed services.
Conduct targeted assessments of new products and infrastructure changes before they ship.
The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 183,000 - 365,000 in Colorado // 197,000 - 395,000 in Massachusetts // 197,000 - 420,000 in California // 173,000 - 420,000 in North Carolina & Texas The listed salary range reflects base salary. Variable incentives may also be offered.
Responsibilities
Own the reference architecture and engineering standards for production agentic AI systems.
Design reusable agent execution harnesses that separate AI reasoning and planning from deterministic execution.
Lead multi-agent workflows, state management, memory, tool calling, human-in-the-loop controls, and long-running processes.
Define model-agnostic interfaces supporting commercial, cloud-hosted, and open-weight models, including routing, fallback, and workload-based selection.
Architect retrieval, context, and memory services using technologies such as RAG, hybrid search, and vector databases.
The Ethical Hacker – Infrastructure & Red Team is responsible for planning, executing, and reporting on infrastructure penetration testing, cloud security assessments, Active Directory security assessments, and adversary simulation engagements.
Locations (2)
Florida, United States
Texas, United States
Responsibilities
Plan and execute infrastructure penetration testing engagements across on-premises, hybrid, cloud, wireless, and enterprise network environments.
Perform internal and external network penetration testing to identify, validate, and exploit security vulnerabilities using manual testing methodologies and industry-standard offensive security tools.
Assess enterprise technologies including Active Directory, Microsoft Entra ID (Azure AD), Windows and Linux environments, virtualization platforms, cloud services, and supporting infrastructure.
Evaluate cloud environments including AWS, Microsoft Azure, and Google Cloud Platform to identify configuration weaknesses, privilege escalation opportunities, identity risks, and cloud security vulnerabilities.
Run a continuous offensive program against SemiAnalysis and Citrini: build an automated, LLM‑driven red team that probes web properties, paywall, APIs, email, cloud accounts and staff around the clock
Harden identity and access: enforce phishing‑resistant MFA, least‑privilege admin on Google Workspace, Slack, GitHub, Stripe, SubStack and cloud, and kill shared credentials
Protect the product: secure the paywall and subscriber data, detect credential sharing and scraping of paid content, watermark or fingerprint distributed reports, and monitor for leaked reports on Telegram, Discord, forums and dark‑web markets
Defend against insider and departure risk: DLP and egress controls on models, datasets and code; device management; a clean offboarding playbook; evidence preservation that stands up in trade‑secret litigation
Own people security: targeted phishing and vishing simulations against staff and founders, executive impersonation controls, and short practical training
Lead risk-prioritized penetration testing, red‑team engagements, and adversary simulations across product and enterprise environments, developing AI‑assisted workflows and mentoring other practitioners.
Compensation
The salary range for this role in the United States is $183,000 - $200,000.
Responsibilities
Lead risk‑prioritized penetration testing and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.
Identify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.
Scope, design, and execute red‑team campaigns and adversary simulations based on relevant threats, emerging techniques, and business risk.
Develop, validate, and incorporate AI‑assisted workflows into offensive security activities, such as reconnaissance, campaign development, social engineering, tooling, and analysis.
Develop custom scripts, tooling, payloads, and automation to support offensive security engagements.
Requirements
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field
Nice to have: community contributions to offensive security or AI security
Nice to have: building or maturing an internal red‑team program
Nice to have: advanced adversary‑emulation exercises
Nice to have: AI integrations using agent frameworks or LLM APIs
Offensive Security LeadNewNebius · Remote, Europe
Penetration Tester - Infrastructure & Red Team (Texas/Florida)Packetlabs Ltd. · Remote, US+1 more
Senior Cyber Security ConsultantAon · London, United Kingdom
Cybersecurity EngineerSemiAnalysis · New York City, US+1 more