Security Architect jobs in Israel

Mobileye’s Radar Team develops cutting-edge radar technology for autonomous driving (AV) and advanced driver-assistance systems (ADAS). We are looking for a Cyber Security Architect to lead the design and implementation of robust embedded security solutions that protect our radar systems from cyber threats. In this role, you will define security architecture for radar hardware, embedded software, and communication interfaces, ensuring compliance with automotive cybersecurity standards and safeguarding Mobileye’s mission-critical sensing technology. You’ll be part of a team shaping the future of autonomous driving. Our radar technology is a critical component in delivering safe, reliable, and intelligent mobility solutions. You’ll work on innovative projects in a collaborative environment, with the opportunity to influence security strategy at a global scale. What will your job look like: • Security Architecture Design – Develop and maintain end-to-end security architecture for radar systems, including hardware, firmware, and software components. • Threat Modeling & Risk Assessment (TARA) – Perform Threat Analysis and Risk Assessment for radar components, software modules, and communication channels; identify vulnerabilities and design mitigation strategies. • Secure Communication – Implement encryption, authentication, and integrity checks for radar data transmission between hardware and software layers. • Secure Software Design – Define and enforce security controls for APIs, middleware, and integration points between radar systems and other vehicle subsystems. • Compliance & Standards – Ensure radar systems meet ISO 21434, UNECE WP.29, and other relevant automotive cybersecurity regulations. • Collaboration with R&D – Work closely with radar engineers, embedded software developers, and system architects to embed security into the design process. • Incident Response Support – Provide architectural guidance during security incidents involving radar systems. • Technology Evaluation – Assess and recommend security tools, frameworks, and methodologies for radar-specific applications. All you need is: • B.Sc. or M.Sc. in Computer Science, Electrical Engineering, Cybersecurity, or related field. • 7+ years of experience in cybersecurity roles, with at least 3 years in architecture or senior design positions. • Proven experience securing embedded systems - hardware connections, software modules, and real-time communication protocols. • Strong background in system architecture - ability to design and analyze complex, multi-component systems and ensure security is integrated at every layer. • Strong knowledge of cryptography, secure boot, firmware integrity verification, and secure API design. • Excellent communication and documentation abilities. • Strong problem-solving mindset and ability to work in cross-disciplinary teams. Nice to have: • Experience in radar system development or RF engineering. • Experience with automotive cybersecurity standards (ISO 21434, UNECE WP.29). • Understanding of CAN, Ethernet, and automotive communication protocols. • Knowledge of AI/ML security considerations. • Certifications such as CISSP, CCSP, or CEH. Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It's an outstanding legacy of innovation that's fueled by great technology—and outstanding people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, encouraging environment where everyone is motivated to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is seeking a security architect who is interested in a chance to define, and implement next-generation security features for data centers’ networks. The position will take on a lead role, working with teams with varied strengths across NVIDIA and with external partners to research security requirements for networking products. What you'll be doing: • Lead, research, design, develop, and implement solutions for attestation and confidential compute in network devices. • Apply innovative security primitives using attestation capabilities. • Collaborate across external and internal teams and with customers. • Define next generation architecture following standards bodies and developing proof-of-concepts for attestation and confidential compute. What we need to see: • BSc, MSc, or PhD in Electrical Engineering, Computer Science, or Computer Engineering or equivalent experience. • At least 5 years of experience. • Background in attestation protocols such as DICE, SPDM, TPM, CoRIM • Background in confidential compute and trusted execution environments solutions such as ARM CCA and PCIe TDISP • Programming and debugging fundamentals across languages such as Python, and C/C++. • Strong communication skills and a genuine passion for working together as a team are vital. Ways to stand out from the crowd: • Proven security research experience and publications in top security conferences. • Experience with high-scale deployment challenges and threat modeling • Architectural background and hardware-software codesign. NVIDIA has some of the most forward-thinking and talented people in the world working for us. If you're an autonomous researcher passionate about connecting AI applications with the infrastructure that powers them, we want to hear from you.

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA’s Networking AI Platforms Security group is redefining silicon and networking security for next-generation, high-performance infrastructure. We are seeking a Senior Switch Silicon Security Architect to define end-to-end security across switch silicon, firmware, networking protocols, and management stacks. Working with architecture, engineering, and product teams, this role will shape security from early design through validation, manufacturing, and deployment. What you'll be doing: • Research, design, and drive the implementation of hardware and software security architectures for switch platforms that meet internal requirements, customer needs, and industry standards. • Develop threat models and define end-to-end security architectures for hyperscale networking solutions spanning silicon, firmware, high-performance networking protocols, and management stacks. • Partner across NVIDIA with hardware, software, research, and product teams to shape the strategic direction of switch silicon and fabric-level security. • Define and drive multi-generation security roadmaps for switch silicon, networking protocols, and fabric-level solutions. • Engage directly with customers to understand their security requirements and translate them into switch silicon and system architectures that address both component and solution-level needs. • Represent NVIDIA in industry standards bodies and collaborate with external partners to shape emerging security standards and drive interoperability across silicon and networking ecosystems. What we need to see: • B.Sc., M.Sc., or Ph.D. in Electrical Engineering, Computer Engineering, Computer Science, or equivalent practical experience. • 7+ years of experience in silicon security, SoC architecture, embedded systems security, or a related field. • Proven hands-on experience architecting and implementing hardware roots of trust, secure boot, attestation, secure lifecycle and debug mechanisms, and key provisioning. • Strong foundation in applied cryptography at scale, including hardware trade-offs, PKI, key and identity management, post-quantum cryptography, and encryption technologies. • Hands-on experience architecting secure hardware–firmware interfaces for SoCs and embedded devices. • Deep understanding of high-performance networking protocols and their end-to-end security implications. • Strong communication and influencing skills, with a proven ability to drive initiatives in a fast-paced organization. Ways to stand out from the crowd: • Experience influencing industry security standards or collaborating with cloud customers and external partners on hardware and end-to-end networking security architectures. • A proven track record of taking innovative security technologies from research and architecture through implementation and deployment in production silicon. • Deep expertise in securing high-performance networking protocols and fabrics, including Ethernet, InfiniBand, and NVLink, with a strong understanding of the switch’s role in end-to-end confidential computing and trusted execution environment architectures. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. Widely considered to be one of the technology world’s most desirable employers, NVIDIA offers highly competitive salaries and a comprehensive benefits package. As you plan your future, see what we can offer to you and your family www.nvidiabenefits.com/

NVIDIA is seeking best-in-class ASIC Design Engineers to design and implement the world’s leading CPU's and SoC's. This position offers you the opportunity to have real impact in a dynamic, technology-focused company impacting product lines ranging from consumer graphics to self-driving cars and the growing field of artificial intelligence. NVIDIA is a “learning machine” that constantly evolves by adapting to new opportunities that are hard to pursue, that only we can take on, and that matter to the world. We have crafted a team of excellent people stretching around the globe, whose mission is to push the frontiers of what is possible today and define the platform for the future of computing. NVIDIA is building a new group in Israel, this group will deliver security engines and risc-V processor IPs to all of NVIDIA product lines working with all NVIDIA groups around the world. We are looking for an Architect with a security experience to help lead the Arch work on security engines and secure boot flows. You will work closely with NVIDIA security architects, design engineers, verification engineers, and SW engineers to accomplish your tasks. What you will be doing: • Participate in Architecture development and document specifications. • Work with RTL and the verification team to ensure that the design meets the spec. • Help deliver a design that meets the high security standards of NVIDIA and our customers. What we need to see: • A BSc and/or MSc from a major university in electrical engineering or computer engineering • At least 10 years of relevant experience in ASIC design, uArch and Arch in the areas of crypto engines and root of trust. • A good system level understanding and experience working with multiple groups including ASIC design, FW and SW. • Good interpersonal skills. And team player With competitive salaries and a generous benefits package, NVIDIA is widely considered to be one of the technology world’s most desirable employers. We employ some of the most forward-thinking and hardworking people in the world. Are you passionate about becoming a part of an outstanding team supporting the latest technology? If so, we want to hear from you. NVIDIA is an equal-opportunity employer. We value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

NVIDIA is seeking a technical leader interested in defining, crafting, implementing, and guiding the implementation of security research, architecture, implementation, and design for next-generation NVIDIA Networking products. You'll be expected to take a strong hands-on role, working with diverse teams across NVIDIA and with external partners to meet security requirements for our state-of-the-art network products. NVIDIA’s invention of the GPU 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. More recently, GPU deep learning ignited modern AI — the next era of computing — with the GPU acting as the brain of computers, robots, and self-driving cars that can perceive and understand the world. Today, we are increasingly known as “the AI computing company”. We are looking to grow our teams with the smartest people in the world. If you're creative and autonomous, we want to hear from you! What you'll be doing: • Research, design, develop and implement architecture solutions (Hardware and software) meeting internal and external security requirements and standards. • Apply innovative hardware security primitives to enable next generation secure software extensions supported by hardware. • Design next generation production and provisioning systems. • Collaborate with partners on the implementation of open-source software. • Collaborate across the company to guide the direction of Its (USB, I2C, I3C, UART, PCI) working with hardware, software, research and product teams. • Architectural modeling, validation, microarchitectural definition, following standards bodies, and developing infrastructure enabling trusted platforms using hardware security methods. • Work with customers, partners to identify and address security issues and threats. What we need to see: • BSc, MS or PhD in Electrical Engineering, Computer Science or Computer Engineering, or equivalent experience. • 7+ years of relevant experience. • Experience with production and provisioning design of SoC systems. • Have directly worked on several of the following: • Key management systems and HSM operation. • First-hand work experience with IO interface including: I2C, I3C, SPI, UART, USB, PCIe • Computing platform boot architecture in embedded devices and servers • RISC-V architecture, Root-of-trust, and security processors. • Familiarity with embedded systems and programming low-level firmware. • Familiar with Security-by-design hardware and principles of privileges. • Programming and debugging fundamentals across languages such as: Verilog, Python/Perl scripting, ARM assembly and C/C++. • The ability to work in a dynamic collaboration oriented team is required and strong communication skills and a real passion for working as a team are essential. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

NVIDIA Networking product security team is looking for an outstanding technical security architect with hands-on experience to help us improve the security posture of NVIDIA networking products. In this role you will partner with firmware, hardware, and architecture teams on the security architecture, to reduce risk, threats, and vulnerabilities while driving new security features that affect millions of devices all over the world! What you'll be doing: • Be involved in the security architecture of NVIDIA Networking firmware — trust boundaries, privilege separation between firmware domains, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows. • Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products. • Analyze complex firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host- and network-facing management interfaces. • Define security features and mitigations spanning the full device lifecycle — provisioning, attestation, debug authorization, runtime hardening, and field update. Guide the engineering teams throughout the implementation. • Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them. • Partner with hardware and ASIC architects to specify the security primitives firmware depends on, and define how they are used across the product line. • Drive secure development practices for firmware — memory-safe coding patterns in C, static analysis, and fuzzing of firmware-exposed interfaces — and make sure development processes meet security and coding standards. What we need to see: • Academic degree in computer science, electrical engineering, or related field. Candidates with equivalent work experience will also be considered. • Demonstrated experience of 5+ years in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases. • Experience defining security policy models — authorization schemes, RBAC, and administrative role separation — including how policy is expressed, enforced, and administered in production. • Familiarity with applied cryptography (including secure boot, code signing, and attestation), threat modeling, common attack vectors, and mitigation techniques. • Ability to work independently, and collaboratively in a constantly evolving environment. • Excellent communication and interpersonal skills. Ways to stand out from the crowd: • M.Sc. or PhD in computer science, electrical engineering, or related technical field. • Experience with hardware/software interfaces in networking devices — register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration and management interfaces, and the firmware that drives them. • Experience with hardware roots of trust and hardware-enforced isolation (MPU/MMU, secure enclaves, fuse/OTP-based provisioning) in SoCs or ASICs. • Hands-on experience with networking software — device drivers, control plane, management interfaces, or embedded network operating systems — and an understanding of how these components interact with firmware. • Familiarity with high-scale deployment, the data center security ecosystem and its operational challenges. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

NVIDIA's Networking AI Platforms Security group is redefining how security operates at scale by embedding AI at the core of its detection, defense, and engineering workflows. We are seeking a Senior Security Architect to design, build, and deploy intelligent AI agent systems tackling NVIDIA's most complex security challenges. Working alongside security architects, engineering, and platform teams, this role offers a rare opportunity to shape the future of AI-powered security at one of the world's most innovative companies! What you'll be doing: • Design and deploy AI agent systems for security workflows: PQC transition, attacker-defender frameworks, threat modeling, and automated mitigation deployment. • Build frameworks integrating LLMs, RAG, and automation pipelines with security data sources and engineering workflows. • Partner with product and architecture organizations to embed security requirements early and translate threat landscapes into scalable solutions. • Own the full agentic system lifecycle: architecture, prototyping,productization, testing, and operational stewardship. What we need to see: • BS, MS, or Ph.D. in Computer Science, Electrical Engineering, or related field, or equivalent experience; Ph.D. preferred. • 5+ years of experience. • Proven experience building agentic systems, LLM integrations, RAG pipelines, or workflow orchestration in production. • Strong security foundation: cryptography, PKI, key management, Root of Trust technologies, Cloud security and secure software design. • Excellent Python skills and system design abilities across software, firmware, and cloud environments. • Strong communication skills with the ability to drive cross-functional projects in a high pace organization. Ways to stand out from the crowd: • Experience with PQC migration, cryptographic inventory, or crypto-agility programs. • Background in security automation: attacker-defender simulation, red-team tooling, SAST/DAST, or vulnerability management. • Data science experience on large-scale networking and security telemetry: anomaly detection, behavioral analytics, or risk scoring. • LLM fine-tuning expertise or open-source/research contributions in AI and security intersection. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development. The role is responsible for defining and implementing security architecture principles, designing secure cloud-native environments, and embedding security throughout infrastructure provisioning and software development lifecycles. The successful candidate will combine deep technical expertise in Kubernetes and cloud security with proven team leadership, architectural design, and cross-functional collaboration skills. They will work closely with Cloud Engineering, DevOps, R&D, Platform Engineering, IT, and Security teams to ensure that security is built into the organization’s technology foundations. Your responsibilities will include: Cybersecurity Architecture • Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. • Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. • Translate threat models, business requirements, and risk assessments into practical security controls. • Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. • Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security • Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. • Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. • Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. • Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. • Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. • Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. • Establish security controls for container orchestration platforms across development, testing, and production environments. • Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security • Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. • Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. • Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. • Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies. • Ensure alignment with organizational security requirements and relevant industry standards. Secure Development and DevSecOps • Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations. • Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines. • Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning. • Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls. • Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery. • Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams. Security Engineering and Risk Management • Develop technical security standards, architecture patterns, and security control baselines. • Conduct threat modeling, attack-path analysis, architecture risk assessments, and security design reviews. • Define security requirements for identity, access, data protection, network security, workload isolation, and observability. • Collaborate with Security Operations to improve security telemetry, detection capabilities, and incident readiness. • Evaluate emerging security technologies and recommend solutions based on risk reduction, operational effectiveness, and architectural fit. • Track security findings and drive measurable improvements in the organization’s security posture. Team Leadership and Collaboration • Lead, mentor, and develop a team of cybersecurity architects and security engineers. • Define team strategy, technical priorities, delivery plans, and measurable performance indicators. • Build effective partnerships with Cloud Engineering, DevOps, R&D, Platform Engineering, and other technology stakeholders. • Communicate complex architectural risks and technical trade-offs to senior management and engineering leadership. • Foster a culture of engineering excellence, automation, accountability, and continuous improvement. We expect you to have: • 7+ years of experience in cybersecurity, security engineering, cloud security, or security architecture. • 3+ years of experience managing technical teams or leading senior technical professionals. • Strong practical knowledge of Kubernetes architecture and container security in production environments. • Demonstrated experience securing cloud-native workloads and distributed systems. • Strong expertise in AWS and/or Microsoft Azure security architecture. • Hands-on understanding of Kubernetes RBAC, network policies, admission controllers, workload security, secrets management, and container runtime security. • Experience with Docker or other container technologies, Kubernetes deployment workflows, and container registries. • Strong understanding of cloud networking, IAM, encryption, key management, logging, and workload protection. • Practical experience with Infrastructure as Code and automated security controls. • Experience securing CI/CD pipelines and integrating security into software development processes. • Knowledge of threat modeling, vulnerability management, security architecture reviews, and risk assessment methodologies. • Proven ability to influence engineering teams and translate security requirements into scalable technical solutions. • Excellent communication skills in English. Key Success Metrics • Improved security posture and reduced attack surface across Kubernetes and cloud environments. • Reduction in critical misconfigurations, excessive privileges, and recurring architectural vulnerabilities. • Increased adoption of secure-by-design architecture patterns across engineering teams. • Improved security coverage and automation across CI/CD pipelines and infrastructure provisioning. • Reduced time to remediate critical security findings. • Consistent implementation of Kubernetes and cloud security baselines. • Improved collaboration between cybersecurity, cloud infrastructure, platform, and development teams. • Development of a high-performing cybersecurity architecture team. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect to join the Cyber Security organization, reporting to the Security Architect Manager. This role focuses on designing and implementing secure architectures across corporate networks and cloud environments. You will play a key role in defining secure solutions, reviewing system designs, and ensuring security is embedded across enterprise infrastructure. The ideal candidate brings strong hands-on expertise in network and cloud security, along with the ability to work closely with IT, Infrastructure, DevOps, and Engineering teams to drive secure and scalable implementations. You’re welcome to work in our offices in Amsterdam. Your responsibilities will include: • Design and implement secure architectures across corporate networks, cloud platforms, and hybrid environments. • Define and maintain security standards, guidelines, and reference architectures aligned with organizational requirements. • Review and approve architecture and design of new systems, infrastructure, and network changes. • Design and support secure enterprise network architectures, including segmentation, Zero Trust, and remote access solutions. • Define and implement controls for firewalls, ZTNA, proxies, and network access control (NAC). • Design secure cloud architectures including IAM, networking, and workload protection. • Ensure proper implementation of cloud security controls such as segmentation, encryption, and monitoring. • Define and support identity and access management controls, including SSO, MFA, and privileged access. • Contribute to endpoint security architecture, including EDR/XDR and device hardening standards. • Identify security risks and architectural gaps and recommend mitigation strategies. • Participate in architecture reviews, risk assessments, and security design discussions. • Collaborate with SOC, Vulnerability Management, IT, and Engineering teams to improve overall security posture. • Support implementation of security architecture initiatives and improvements across the organization. We expect you to have: • 5+ years of experience in cyber security, with a focus on cloud security, networks, and/or SDLC • Experience working with cloud platforms (AWS, GCP, Azure) and cloud security best practices. • Strong hands-on experience in enterprise network security (firewalls, segmentation, VPN, proxies, NAC, etc.). • Solid understanding of identity and access management (IAM), Active Directory / Entra ID, and access control models. • Experience working in hybrid environments (on-premise + cloud). • Strong understanding of security architecture principles and risk-based design. • Experience working cross-functionally with IT, Infrastructure, DevOps, and Engineering teams. • Strong analytical and problem-solving skills. It will be an added bonus if you have: • Experience with Zero Trust architecture and network segmentation strategies. • Familiarity with cloud security tools (e.g., Wiz). • Experience with enterprise identity platforms (Entra ID / Azure AD, Okta, etc.). • Knowledge of regulatory and compliance frameworks (ISO 27001, SOC 2, NIST, etc.). • Experience in SaaS, cloud-native, or enterprise-scale environments. • Relevant certifications such as CISSP, CCSP, or equivalent. • BSc in Computer Science, Information Security, or a related field. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.