<div class="content-intro"><p><strong>About Nebius:</strong></p> <p>Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.</p> <p>Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.</p> <p>Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.</p></div><h3><strong><span data-ccp-props="{}">The role</span></strong></h3> <p><span data-ccp-props="{}">Nebius is looking for </span>an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development.</p> <p>The role is responsible for defining and implementing security architecture principles, designing secure cloud-native environments, and embedding security throughout infrastructure provisioning and software development lifecycles.</p> <p>The successful candidate will combine deep technical expertise in Kubernetes and cloud security with proven team leadership, architectural design, and cross-functional collaboration skills. They will work closely with Cloud Engineering, DevOps, R&D, Platform Engineering, IT, and Security teams to ensure that security is built into the organization’s technology foundations.</p> <p><strong><span data-contrast="auto"><span data-ccp-charstyle="Strong">Your responsibilities will include:</span></span></strong><span data-ccp-props="{"134233117":true,"134233118":true}"> </span></p> <p><strong>Cybersecurity Architecture</strong></p> <ul> <li>Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles.</li> <li>Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives.</li> <li>Translate threat models, business requirements, and risk assessments into practical security controls.</li> <li>Establish security-by-design principles across cloud, infrastructure, application, and platform architectures.</li> <li>Identify architectural security gaps and drive remediation roadmaps.</li> </ul> <p><strong>Kubernetes and Cloud-Native Security</strong></p> <ul> <li>Design and implement security architectures for Kubernetes-based environments and cloud-native platforms.</li> <li>Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications.</li> <li>Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management.</li> <li>Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity.</li> <li>Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments.</li> <li>Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable.</li> <li>Establish security controls for container orchestration platforms across development, testing, and production environments.</li> <li>Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads.</li> </ul> <p><strong>Cloud Infrastructure Security</strong></p> <ul> <li>Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments.</li> <li>Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management.</li> <li>Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement.</li> <li>Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies.</li> <li>Ensure alignment with organizational security requirements and relevant industry standards.</li> </ul> <p><strong>Secure Development and DevSecOps</strong></p> <ul> <li>Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations.</li> <li>Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines.</li> <li>Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning.</li> <li>Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls.</li> <li>Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery.</li> <li>Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams.</li> </ul> &l