Откликайтесь
на вакансии с ИИ
Infrastructure Security Engineer
Оценка ИИОтличная вакансия в быстрорастущей международной компании (Nebius/Nasdaq), работающей на острие технологий ИИ. Предлагает удаленный формат работы, конкурентную зарплату и работу со сложным технологическим стеком.
Сложность вакансии
Оценка ИИВысокая сложность обусловлена необходимостью глубоких знаний в Linux hardening, безопасности Kubernetes и сетевой инфраструктуры, а также обязательным этапом технического интервью по кодингу.
Анализ зарплаты
Оценка ИИЗарплата в вакансии не указана, но для роли Infrastructure Security Engineer в европейском регионе (Remote) рыночные показатели составляют от 70,000 до 110,000 евро в год. Nebius, как публичная компания, обычно предлагает конкурентоспособные условия, соответствующие верхнему децилю рынка.
Сопроводительное письмо
I am writing to express my strong interest in the Infrastructure Security Engineer position at Nebius. With over four years of experience in securing complex cloud and on-premises environments, I have developed a deep expertise in Linux hardening, Kubernetes security, and network protection. My background in automating security processes using Python and Go, combined with a proactive approach to threat modeling, aligns perfectly with Nebius's mission to provide resilient and high-performance AI cloud infrastructure.
In my previous roles, I have successfully implemented security controls across distributed systems and managed Infrastructure as Code using Terraform. I am particularly drawn to Nebius because of its leadership in the AI economy and the opportunity to work alongside world-class engineers. I am confident that my technical skills in IAM, VPN security, and container orchestration will contribute significantly to fortifying your platform's security posture and ensuring the protection of critical data.
Составьте идеальное письмо к вакансии с ИИ-агентом
Откликнитесь в nebius уже сейчас
Присоединяйтесь к Nebius и станьте частью команды, создающей передовую облачную инфраструктуру для глобальной экономики ИИ!
Описание вакансии
Why work at NebiusNebius is leading a new era in cloud computing to serve the global AI economy. We create the tools and resources our customers need to solve real-world challenges and transform industries, without massive infrastructure costs or the need to build large in-house AI/ML teams. Our employees work at the cutting edge of AI cloud infrastructure alongside some of the most experienced and innovative leaders and engineers in the field.
Where we workHeadquartered in Amsterdam and listed on Nasdaq, Nebius has a global footprint with R&D hubs across Europe, North America, and Israel. The team of over 1400 employees includes more than 400 highly skilled engineers with deep expertise across hardware and software engineering, as well as an in-house AI R&D team.
The role
The Security Engineering Team within the Platform Security organization is responsible for the strategic selection, implementation, management, and optimization of cybersecurity tools and technologies that improve security capabilities of the organization's platform. This team is instrumental in fortifying the security posture, proactively identifying and responding to security threats, ensuring the resilience and protection of critical data, systems, and services.
We are looking for an Infrastructure Security Engineer to secure our cloud and on-premises infrastructure by implementing security controls, monitoring threats, ensuring compliance with industry standards and respond to security incidents. The ideal candidate has a strong background in cloud security, Linux hardening, and network security.
Your responsibilities will include:
- Design and implement security measures to protect cloud and on-premises infrastructure.
- Identify and remediate vulnerabilities in cloud environments, networks, and operating systems.
- Build and maintain cloud and infrastructure security tools.
- Perform security reviews, threat modeling and risk assessments of infrastructure components.
- Develop and maintain security guidelines for Network and SRE teams.
- Collaborate with Network and SRE teams to integrate security best practices into their processes and systems.
- Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.
- Serve as an network and infrastructure security subject matter expert to other teams.
We expect you to have:
- 4+ years of experience in network, infrastructure or cloud security.
- Strong understanding of modern cloud architectures and deployment models (VMs, containers, serverless, Kubernetes).
- Solid knowledge in networks, distributed systems and Linux systems engineering.
- Hands-on experience with network, VPN and Linux security.
- Understanding of Identity and Access Management (IAM) systems.
- Experience with security automation tools and scripting (e.g. Python, Bash, Go, etc.) and willingness to learn Go, if necessary.
- Experience in using and accessing security of Infrastructure as Code (Terraform).
- Experience in hardening Linux based systems (apparmor, seccomp, etc.).
- Experience in hardening Kubernetes.
- Strong problem-solving and analytical skills.
- Good written and verbal communication skills in English.
- Willingness to learn new things.
- Being comfortable working independently.
It will be an added bonus if you have:
- Proficiency in securing AWS, GCP, or Azure environments.
- Experience in conducting threat-modeling sessions.
- Experience in designing, building, and maintaining Identity Aware Proxies or Bastion hosts.
- Experience in translating compliance and regulation requirements into technical specifications.
- Experience in exploiting vulnerabilities in Linux kernel, VMs, containers, and networks.
- Experience in securing bare metal workloads.
- Security certifications such as OSCP or CKS.
We conduct coding interviews as part of the process.
What we offer
- Competitive salary and comprehensive benefits package.
- Opportunities for professional growth within Nebius.
- Flexible working arrangements.
- A dynamic and collaborative work environment that values initiative and innovation.
We’re growing and expanding our products every day. If you’re up to the challenge and are excited about AI and ML as much as we are, join us!
Создайте идеальное резюме с помощью ИИ-агента
Навыки
- Linux
- Kubernetes
- Terraform
- Go
- Python
- Network Security
- Cloud Security
- IAM
- Bash
- Docker
- AppArmor
- seccomp
- VPN
- Threat Modeling
Возможные вопросы на собеседовании
Вакансия требует опыта работы с Kubernetes и его защиты.
Расскажите о вашем опыте харденинга Kubernetes-кластеров. Какие инструменты (например, OPA, Kyverno) вы использовали и какие политики внедряли?
В описании указано использование Terraform и безопасность IaC.
Как вы организуете процесс проверки безопасности (security linting/scanning) для конфигураций Terraform в CI/CD пайплайне?
Компания ищет специалиста с навыками программирования (Go/Python).
Напишите на Go или Python скрипт, который анализирует логи доступа к Linux-серверу и выявляет подозрительную активность (например, аномальное количество неудачных попыток входа).
Упоминается важность моделирования угроз.
Проведите краткое моделирование угроз (Threat Modeling) для сервиса, работающего в публичном облаке и имеющего доступ к конфиденциальным данным клиентов. Какие векторы атак вы выделите в первую очередь?
Требуется опыт работы с Linux на низком уровне (apparmor, seccomp).
В чем разница между AppArmor и SELinux, и в каких случаях вы бы предпочли использовать seccomp профили для контейнеризированных приложений?
Похожие вакансии
Application Security Еngineer (AppSec)
Head of SOC (Центр мониторинга кибербезопасности)
Pentester (Offensive Security)
Специалист по информационной безопасности
Solution Sales Consultant (Cybersecurity)
Application security specialist
1000+ офферов получено
Устали искать работу? Мы найдём её за вас
Quick Offer улучшит ваше резюме, подберёт лучшие вакансии и откликнется за вас. Результат — в 3 раза больше приглашений на собеседования и никакой рутины!