Nebius is looking for a Lead Detection Engineer.This is an individual contributor role with full technical ownership. You'll set the direction for detection engineering: the standards, the tooling, the coverage strategy, and the automation that operationalizes it all. You'll work closely with SOC analysts and Platform Engineering to make detection a first-class engineering discipline
You’re welcome to work in our offices in Tel Aviv, Israel
Detection coverage strategy across endpoint, identity, cloud, and infrastructure — how it's measured, prioritized, and continuously improved
Detection-as-Code pipeline: version control, testing, peer review, CI/CD, and deployment practices for all detection logic
Architecture connecting detections to enrichment, triage, and automated response workflows
Technical standards for how detections are designed, tested, documented, deployed, and retired
Detection quality: fidelity metrics, false positive reduction, coverage measurement, and continuous validation loops
Design and build high-fidelity behavioral detections across SIEM and EDR platforms
Research emerging attacker techniques and translate threat intelligence into scalable, evasion-resistant detections
Validate detections through threat simulations and continuous detection testing
Partner with SOC analysts to close the feedback loop between detections and real investigations
Define and track detection engineering metrics; communicate coverage posture and effectiveness to security leadership
Make architectural decisions that scale as the team and organization grow