Cybersecurity Teaching Experts

About the Role

Veeam VDC Security Engineering builds and operates the security platform for a multi-cloud (Azure and AWS) SaaS serving regulated industries. This role sits in Platform Security and helps drive AI/LLM security as a discipline. You will help shape how VDC uses large language models safely (defensively, at scale) and how we use them offensively to find and fix real security defects faster than traditional programs allow.

What You’ll Do

• Design and ship the data-handling controls (code, filters, and infrastructure guardrails) for VDC's internal AI tooling and the AI features in our product. Redact sensitive data from prompts, model context, logs, and outputs before any of it reaches a third-party model provider
• Build and productionize an AI-enhanced vulnerability reduction capability that plugs into CI/CD, surfaces real defects with a low false-positive rate, and either recommends or applies remediation without eroding developer trust
• Publish and evolve a self-serve secure-LLM-use pattern for other VDC engineering teams, including input filtering, output validation, provider-tier data classification, and threat-model shortcuts for teams adding AI features to their products
• Threat-model internal AI tools for prompt injection, indirect prompt attack surfaces, model exfiltration, and agent-tool boundary weaknesses. Partner with the red team on findings, then build the fixes and guardrails with tool owners
• Partner with Compliance to shape auditor-facing evidence for AI-assisted controls, including which evidence formats hold up when the collector was an LLM and where human review must gate disclosure
• Contribute the AI-security lens to adjacent Security Engineering programs where LLMs touch the surface area: vulnerability management maturity, supply chain risk reduction, code owners routing, and compliance evidence collection
• Set VDC's direction on emerging LLM security tools and internal AI-forward workflows: what to adopt, what to skip, and what to build in-house

Technologies You’ll Work With

• Azure OpenAI Service and other Azure AI Foundry components
• Anthropic Claude, OpenAI, and multi-provider LLM APIs used across VDC internal tools
• Microsoft Presidio, custom redaction pipelines, or equivalent PII/secrets detection at the prompt boundary
• Cycode (SAST / SCA / Secrets) and Wiz for signal fusion into AI-driven remediation
• GitHub Actions and Azure DevOps for CI/CD integration of security-review LLM tooling
• Python and Go for the AI security tooling stack; comfort reading PowerShell and TypeScript for integration points
• Microsoft Sentinel and Log Analytics for the audit trail on AI-mediated security operations

What You’ll Bring

• 10+ years across security and engineering, with recent focus on AI/ML systems in production (LLM deployments, model risk, or AI-driven security tooling)
• Hands-on experience shipping controls (Code, infra or data gaurdrails) that operate on LLM inputs and outputs (redaction, filtering, output validation, prompt-injection defense)
• Build and tune detection systems that catch PII and secrets (API keys, credentials, personal data) across large, messy datasets, knowing when a regex rule is good enough, when you need a trained classifier, and when only an LLM can catch it, and justifying that choice on cost, latency, and accuracy grounds
• Track record of taking AI/security work from concept to production, including designing for developer trust and false-positive management
• Strong cloud security fundamentals across Azure and AWS: RBAC, secret management, key handling, network egress controls
• Turn ad-hoc "is this LLM use case safe?" questions into a reusable mechanism (a scoring rubric in PR templates, a lint rule, an approval gate) that teams run themselves, instead of a doc they read once or a person they ping
• Comfort building and hardening security tooling in Python and Go
• Familiarity with regulated-industry evidentiary expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and how AI-generated evidence intersects with them
• Hands-on experience with agentic AI development environments (Claude Code, Cursor, GitHub Copilot Enterprise) and their operational security implications
• A demonstrable track record of shipping production code (a code portfolio, open-source contributions, or internal build history). This is a hands-on building role, not an advisory one

Bonus Skills

• Familiarity with LLM attack techniques (prompt injection, indirect prompt attacks, tool-boundary abuse, model exfiltration) enough to threat-model and build defenses
• Background in traditional AppSec or SAST that translates cleanly to LLM-augmented vulnerability finding
• Contributions to open-source LLM safety or evaluation projects (Presidio, PromptFoo, Garak, etc.)
• Prior work with Azure OpenAI Service enterprise data-handling controls and LLM governance patterns
• Experience integrating security tooling into developer workflows without becoming a merge-blocking bottleneck

#LI-SO2

TripleTen is a service that empowers people, regardless of their prior experience, to embark on the exciting and challenging journey of mastering tech professions. Our bootcamps focus on training students in Data Analytics, Data Science, Web Development, Quality Assurance (QA) Engineering, and UX/UI Design — in an accessible and practical way, supporting them until they successfully thrive in a new career.

🚀 Our mission is to ensure that every student has the opportunity to successfully master a new profession, find their purpose, and become a valuable member of the tech industry.

What is our goal? We are continuously looking for experienced Cybersecurity professionals who want to support and guide our students on their path to becoming professional developers. This is a full-time teaching role with an expectation of 40 hours per week. The schedule can be flexible, but you must be consistently available to support students throughout their learning journey.

How to apply? Apply here. We review applications on a rolling basis, and candidates whose profiles align with the role will be invited to complete a digital interview, and complete a short technical test task.

If a vacancy is available, we will assign it to you right away; otherwise, we will keep your profile and completed task on file for future opportunities.

📌 Please submit your CV in English.

• Host regular live Q&A sessions to help students unblock and progress confidently
• Offer personalized support through 1:1 video calls to answer questions and guide assignments
• Occasionally respond to student questions via direct messages
• Lead live lessons on core program topics and industry-relevant skills
• Share your professional insights and best practices to support the learning community
• Review student projects and provide feedback based on program standards
• Write clear, actionable feedback to help students improve and meet expectations
• Support students in text by explaining concepts, troubleshooting code, and clarifying project or review questions

We require at least 3 years of hands-on experience in cybersecurity, with knowledge in:

• Networking & Architecture: Understanding of flat vs. segmented networks, DMZs, and blast radius reduction.
• Authentication & Access Abuse: Ability to identify risks related to privileged access, RDP usage, and mass data exports.
• Incident Analysis: Experience investigating failed logins, password resets, and administrative account creation using MITRE ATT&CK tactics.
• Log Analysis: Ability to analyze logs and identify suspicious patterns.
• Python Programming: Ability to develop scripts for log processing, occurrence counting, and extracting relevant information.
• Ability to explain complex topics clearly to beginners.
• Patience and empathy toward students who are new to cybersecurity.
• Availability to dedicate between 12 and 20 hours per week to the project, with a flexible schedule that may occasionally include weekends.
• B1 English level and strong Spanish proficiency.
• Ability to answer beginner-level questions with patience and practical examples.

Nice to have:

• Previous teaching experience.
• Experience guiding beginners one-on-one with clear, step-by-step instruction.

• Training in mentoring and communication techniques.
• The opportunity to teach while continuing your main job.
• The chance to share knowledge and experience with developers within our community.
• Cross-cultural collaboration experience through mentoring and webinar facilitation.
• Remote collaboration with a schedule that is convenient for both you and the team. We do not focus on micromanagement.
• A comfortable digital office environment. We use modern digital tools such as Miro, Notion, Zoom, and others to ensure smooth collaboration.
• A diverse and close-knit team distributed across the U.S. and Latin America.

Nebius Academy (powered by TripleTen) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional.

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

We are looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to make security part of the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.

• Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
• Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
• Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
• Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
• Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
• Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
• Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
• Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
• Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
• Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

• 5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
• Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
• Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
• Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
• Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
• Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
• Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
• Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
• Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
• Fluent Russian and English at B2 level or above.

Nice to have:

• Experience building a DevSecOps practice from scratch.
• Experience running or participating in a Security Champions programme.
• Hands-on penetration testing experience.
• Experience securing LLM-powered or AI products.
• Experience with SOC 2 or ISO 27001 from an engineering perspective.
• Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

• A supportive and proactive work environment.
• Competitive compensation: 4000-6000 EUR Gross per month
• Fully remote and full-time collaboration.
• Modern digital tools for seamless collaboration.
• Tangible results measured by student success.