# Lead Security Automation Engineer at Nebius > Israel · Staff · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Anebius%3A4855532101 (read 2026-11-07). ## Facts (observed) - Company: [Nebius](https://alderhq.app/companies/nebius) - Location text: Israel; Israel - Where it can be done from (inferred): Israel (evidence: "Location: Israel; Israel") - Posted: 2026-05-18 (173 days ago) - First seen by alder: 2026-11-02 · last verified: 2026-11-04 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://careers.nebius.com/?gh_jid=4855532101 - Skills listed (inferred): Python, AWS, GCP, Azure, LLMs ## Pay and sponsorship - Posted pay: not posted - Recognised sponsor (NL): registered as "Nebius B.V." (checked 2026-11-03, [register](https://ind.nl/en/public-register-recognised-sponsors/public-register-regular-labour-and-highly-skilled-migrants)) ## Description (the employer's text) ### About Nebius Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. ### The role We are looking for a skilled Lead Security Automation Engineer to join our SOC Automation team and play a key role in building and scaling automation across Security Operations. This is a hands-on role — you will design, develop, and integrate automation solutions across SIEM, EDR, and other security platforms, contributing to our SOAR capabilities from the ground up. You will work in a technologically rich environment, integrating with a wide range of security and infrastructure systems across the network — a unique opportunity to build automation at scale in a greenfield setting, with real influence over the architecture and tooling decisions. We are especially interested in candidates who are curious about leveraging AI and intelligent agents to help evolve next-generation automation and response workflows — and who want to be a driving voice in how we apply those technologies. Your responsibilities will include: Automation development - Design and develop automation workflows for incident response and SOC operations - Identify and eliminate manual processes through scalable automation - Build reusable components and maintainable automation patterns Engineering & integration - Develop integrations using REST APIs, webhooks, and event-driven architectures - Write high-quality, maintainable Python for automation and orchestration - Implement data parsing, enrichment, and transformation across multiple systems SOAR & platform buildout - Lead or actively contribute to the evaluation, selection, and implementation of SOAR/automation platforms - Design the automation architecture and integration strategy for the team - Build automation capabilities in a greenfield environment — your decisions will shape the foundation SOC collaboration - Work closely with SOC analysts and incident responders to translate operational needs into automation solutions - Improve end-to-end detection and response workflows through close partnership with the team AI & innovation - Actively build and evaluate AI/LLM and agent-based workflows applied to security automation - Prototype AI-assisted enrichment, triage, and response solutions and drive them toward production We expect you to have: - Minimum 3 years of hands-on experience with SOAR platforms (e.g., Torq, Cortex XSOAR, Splunk SOAR, or similar) - Strong hands-on experience with Python (or a comparable language) - Experience designing or implementing automation frameworks or workflows - Experience building integrations using REST APIs and web services - Experience working with security tools such as SIEM, EDR/XDR, or ticketing systems - Experience with at least one cloud platform (Azure, AWS, or GCP) - Solid understanding of incident response processes and SOC alert-handling workflows - Experience with at least one SIEM platform (Splunk,Sentinel,Qradar,Crowdstrike) It will be an added bonus if you have: - Experience with CI/CD pipelines and DevOps practices - Familiarity with cloud-native services and architecture - Hands-on exposure to AI/ML, LLMs, or agent-based systems - Has a strong hands-on engineering mindset — you build, not just advise - Is proactive, solution-oriented, and detail-focused - Is genuinely curious about AI and intelligent agents, not just aware of them - Collaborates well with both technical and operational teammates ### Benefits & Perks --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Anebius%3A4855532101 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.