Senior Security Engineer (Detection Engineer)
- Sunnyvale, United States
- Senior Level
- Posted
Skills
Required
- modern TTP frameworks
- writing detections
- Python
- Bash
- Go
- JavaScript
- MITRE
- ATT&CK
- Cyber Kill Chain
Preferred
- detection
- Linux / macOS
- SQL
- Kubernetes
- tooling
- eBPF
- Endpoint Security Framework
- leveraging findings
CoreWeave as a Senior Security Engineer (Detection Engineer) and design cutting-edge detection strategies at scale.
Responsibilities
- Collaborate with talented peers in an innovative environment focused on excellence.
- Enjoy the autonomy to innovate and influence CoreWeave's security landscape directly.
- Responsibilities include developing advanced threat detection capabilities, leading real-time security incident response, conducting proactive threat-hunting exercises, and collaborating with cross-functional teams.
- This role requires a strong foundation in Linux or macOS internals, experience with multiple programming languages, and a deep understanding of modern TTP frameworks.
- Concevoir des stratégies de détection avancées pour identifier et atténuer proactivement les menaces cybernétiques.
- Collaborer avec des équipes interfonctionnelles pour améliorer la visibilité et l'efficacité de la détection de la sécurité.
- Participer à des initiatives stratégiques en matière de sécurité, en contribuant votre expertise à l'architecture et aux contrôles de sécurité.
Requirements
- Proven ability to deliver impactful projects spanning multiple technical domains and teams
- Competency in writing detections in multiple languages (Python, Bash, Go, JavaScript, etc.)
- Solid understanding of modern TTP frameworks such as MITRE ATT&CK and Cyber Kill Chain
- This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency
Preferred
- Strong foundational knowledge of Linux or macOS internals and their relevant event sources (eBPF, Endpoint Security Framework)
- Experience collaborating closely with Purple and Red Teams, leveraging findings to enhance detection capabilities
- Proficiency in at least one query language (e.g., SQL, Splunk Query Language, HiveQL)
- Familiarity with Kubernetes fundamentals and enthusiasm to deepen your expertise
- Extensive experience crafting custom alert logic within industry-standard tooling, like KQL, SQL, etc
- Practical experience applying and contributing to the Incident Response Lifecycle methodology
- Deep understanding of Kubernetes-specific detection and security challenges
- Contributions to the open-source security community or experience developing detection tooling
- Experience leveraging advanced analytics or machine learning techniques in detection engineering
Pay
USD 134,000 - 179,000
jobapplier