<div class="content-intro"><p><strong>About Nebius:</strong></p> <p>Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.</p> <p>Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.</p> <p>Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.</p></div><div><strong>Role Summary</strong><br><br>We are looking for a <strong>Network Security Engineer</strong> to join our Network team. This role combines deep expertise in network engineering and cybersecurity. You will help <strong>implement</strong> end-to-end network security architectures for enterprise and data center backbone/fabric environments, <strong>work with network architects and the management team to guide these designs through review and approval with the Security team, and operate and maintain the implemented solutions day-to-day.</strong><br>You are expected to be hands-on with leading firewall platforms (Palo Alto, Check Point, etc.), understand complex routing and switching designs, <strong>and be comfortable implementing and troubleshooting these networks.</strong><br><br><strong>Responsibilities</strong></div> <ul> <li><strong>Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks.</strong></li> <li><strong>Configure Layer 3/4 & Multi-VRF Segmentation, Security Policies, Secure Remote access.</strong></li> <li><strong>Implement and test large hyper scale DC Security solutions : IPS/NDR solutions , AntiDDOS solutions.</strong></li> <li><strong>Integrate NGFW platforms with modern identity providers such as Microsoft Entra ID and Okta, maintain NGFW management, automation, and logging capabilities required by the Security team.</strong></li> <li><strong>Implement and maintain Security Capabilities, including Layer 7 application inspection, IPS, user identification, ZTNA, and SASE integrations.</strong></li> <li><strong>Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado.</strong></li> <li><strong>Regularly perform security hardening, vulnerability management, and patching and upgrades on network and infrastructure devices, and verify the effectiveness of these procedures.</strong></li> </ul> <div><strong>Required Qualifications</strong></div> <ul> <li>Experience in networking <strong>and security protocols</strong> (TCP/IP, <strong>HTTP(S), DNS, TLS, IPsec, Routing protocols</strong>)</li> <li><strong>Experience and Knowledge of Backbone & Datacenter technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN..)</strong></li> <li>Hands-on experience with next-generation firewalls (Palo Alto Networks, Check Point, or similar).</li> <li>Experience with automation using Python, Go, or equivalent.</li> <li>Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba, etc.).</li> <li><strong>Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID, and ZTNA.</strong></li> </ul> <div><strong>Preferred Qualifications</strong></div> <ul> <li>Good knowledge of IPv6.</li> <li>Experience with automation tools (Ansible, Terraform, NetBox, SaltStack, etc.).</li> <li>Experience with large-scale, highly available distributed systems.</li> <li>Knowledge of Zero Trust principles and micro-segmentation approaches.</li> <li>Relevant certifications (CCNP/CCIE, PCNSE, NSE 4/7) and professional working proficiency in English.</li> <li><strong>Familiarity with commercial or open-source monitoring, logging, and security analytics solutions such as Splunk; EDR/XDR platforms such as CrowdStrike; and centralized NGFW management platforms such as Panorama, Strata Cloud Manager, and FortiManager.</strong></li> <li><strong>Bonus: Exposure to DevSecOps practices (SAST/DAST), CSPM/CWPP platforms such as Wiz, EDR, offensive security (OSCP/CPTS, red teaming), or security frameworks, standards, and regulations such as ISO/IEC 27001, NIST CSF, and GDPR.</strong></li> </ul><div class="content-conclusion"><p><strong>Benefits & Perks:</strong></p> <ul> <li>Competitive compensation</li> <li>Career growth and learning opportunities</li> <li>Flexibility and ownership</li> <li>Collaborative and innovative culture</li> <li>Opportunity to work on impactful AI projects</li> <li>International environment and talented teams</li> </ul> <p><strong>What's it like to work at Nebius:</strong></p> <p>Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI </p> <p><strong>Equal Opportunity Statement: