vulnerability Assessment Analyst

Nebius

Nebius is building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment.

Tel Aviv, Israel Posted 4mo ago cloudaiinfrastructure

Apply directly →

Why work at Nebius
Nebius is leading a new era in cloud computing to serve the global AI economy. We create the tools and resources our customers need to solve real-world challenges and transform industries, without massive infrastructure costs or the need to build large in-house AI/ML teams. Our employees work at the cutting edge of AI cloud infrastructure alongside some of the most experienced and innovative leaders and engineers in the field.

Where we work
Headquartered in Amsterdam and listed on Nasdaq, Nebius has a global footprint with R&D hubs across Europe, North America, and Israel. The team of over 1400 employees includes more than 400 highly skilled engineers with deep expertise across hardware and software engineering, as well as an in-house AI R&D team.

The Role:

We are seeking a highly experienced Vulnerability Lead to join the Cyber Security organization, reporting directly to the Head of PMO under the CISO.

This role combines deep domain expertise in Vulnerability Management with strong project leadership capabilities. The primary focus is to lead and mature the organization’s vulnerability management program, while also driving additional cross-functional security initiatives.

The ideal candidate brings hands-on experience in vulnerability lifecycle management, risk-based prioritization, and remediation at scale, along with the ability to operate across security, engineering, infrastructure, and product teams.

Responsibilities:

Vulnerability Management Leadership
Own and lead the organization’s Vulnerability Management program across cloud, infrastructure, SaaS, and application environments.
Drive end-to-end vulnerability lifecycle: identification, assessment, prioritization, remediation, and validation.
Implement and enforce risk-based prioritization aligned with business impact and threat intelligence.
Define, track, and improve KPIs such as SLA adherence, remediation timelines, and exposure trends.
Work closely with Security, DevOps, Infrastructure, and Engineering teams to ensure effective remediation at scale.
Project & PMO Execution
Lead and deliver additional cross-functional cyber security projects under the CISO organization.
Define project scope, objectives, timelines, and success metrics aligned with security strategy.
Manage execution, dependencies, risks, and stakeholder alignment across multiple initiatives.
Prepare executive-level reporting and dashboards for the CISO and senior leadership.
Strategy & Improvement
Continuously improve vulnerability management processes, tooling, and governance.
Support audits, compliance requirements, and security risk reporting.
Act as a subject matter expert for vulnerability risk across the organization.

Required Qualifications:

3-5 years of experience in Vulnerability Management, cyber security operations, or related domains.
Strong hands-on experience managing vulnerability lifecycle and remediation processes at scale.
Proven experience working with vulnerability management tools (e.g., Qualys, Tenable, Rapid7, Wiz, Prisma Cloud).
3+ years of experience in project or program management within technology or security environments.
Strong understanding of cloud, infrastructure, and application environments.
Experience working cross-functionally with Security, DevOps, Engineering, and IT teams.
Experience in risk-based prioritization and security risk management methodologies.
Hands-on experience with project management tools such as Jira, Monday, Asana, or similar systems.
Excellent communication skills with experience presenting to senior leadership.

Preferred Qualifications:

Experience working within a CISO organization or Security PMO.
Background in SaaS, cloud infrastructure, or large-scale enterprise environments.
Familiarity with regulatory frameworks (ISO 27001, SOC 2, NIST, etc.).
Experience leading enterprise-wide security or risk reduction initiatives. BSc in Industrial Engineering, Computer Science, or a related field.

What we offer:

Competitive salary and comprehensive benefits package.
Opportunities for professional growth within Nebius.
Flexible working arrangements.
A dynamic and collaborative work environment that values initiative and innovation.

We’re growing and expanding our products every day. If you’re up to the challenge and are excited about AI and ML as much as we are, join us!

Equal Opportunity Statement:

Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law.

Applicants must be authorized to work in the country in which they apply, and will be required to provide proof of employment eligibility as a condition of hire.

Posted by Nebius on their own careers page — you apply directly, no recruiter in between. View original / apply →