SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Nebius is a Nasdaq-listed AI cloud infrastructure company headquartered in Amsterdam with 1,500+ employees and R&D hubs across Europe, North America, and Israel. The company provides a full-stack AI cloud platform supporting data training, model development, and production deployment for developers and enterprises.
You will lead Nebius's proactive threat hunting program, reporting to the Head of Proactive Security under the CISO. This role combines technical expertise with team leadership to identify advanced threats across corporate IT, cloud platforms, and data center infrastructure before they become incidents.
Key responsibilities include:
- Leading and managing the Threat Hunting team with mentoring, prioritization, and professional development
- Defining and executing the organization's proactive threat hunting strategy across corporate IT, cloud, and data center environments
- Conducting hypothesis-driven threat hunting to identify advanced threats, persistence mechanisms, and malicious activity not detected by existing controls
- Developing and continuously improving threat hunting methodologies, playbooks, and operational procedures
- Leveraging threat intelligence, adversary TTPs, and MITRE ATT&CK to drive hunting campaigns
- Hunting across endpoint, identity, network, cloud, and application telemetry for suspicious behavior and indicators of compromise
- Collaborating with SOC, Incident Response, Detection Engineering, and Security Engineering teams
- Converting successful hunts into automated detections and improving security monitoring coverage
- Identifying security gaps and recommending infrastructure improvements
- Producing technical reports, executive summaries, and threat assessments for leadership
- Defining KPIs and measuring threat hunting program effectiveness and maturity
- Staying current on emerging threat actors, attack techniques, AI-driven threats, and industry best practices
Requirements:
- 6+ years of cyber security experience with strong focus on threat hunting, incident response, detection engineering, or SOC operations
- 2+ years of experience leading technical security teams
- Strong understanding of attacker methodologies, post-exploitation techniques, and modern cyber threats
- Hands-on experience conducting hypothesis-driven threat hunting across endpoint, network, identity, and cloud environments
- Deep knowledge of MITRE ATT&CK and adversary tactics, techniques, and procedures (TTPs)
- Experience with EDR/XDR, SIEM, cloud security platforms, and threat intelligence sources
- Experience investigating advanced persistent threats (APTs), ransomware, insider threats, and cloud-based attacks
- Strong scripting or query skills (KQL, SPL, SQL, Python, PowerShell) for threat hunting and analysis
- Strong analytical, investigative, and problem-solving skills
- Excellent written and verbal communication skills in Hebrew and English
Bonus qualifications:
- Experience hunting across AWS, GCP, or Azure cloud environments
- Familiarity with large-scale enterprise, cloud-native, or AI infrastructure environments
- Experience developing detection rules and behavioral analytics
- Knowledge of malware analysis, digital forensics, or reverse engineering concepts
- Experience with threat intelligence platforms and threat hunting frameworks
- Relevant certifications (GCFA, GCTI, GREM, GCIA, CISSP, or equivalent)
- BSc in Computer Science, Information Security, or related field
