jobapplier

Senior Security Engineer (Detection Engineer)

CoreWeave

Skills

Required

  • modern TTP frameworks
  • writing detections
  • Python
  • Bash
  • Go
  • JavaScript
  • MITRE
  • ATT&CK
  • Cyber Kill Chain

Preferred

  • detection
  • Linux / macOS
  • SQL
  • Kubernetes
  • tooling
  • eBPF
  • Endpoint Security Framework
  • leveraging findings

CoreWeave as a Senior Security Engineer (Detection Engineer) and design cutting-edge detection strategies at scale.

Responsibilities

  • Collaborate with talented peers in an innovative environment focused on excellence.
  • Enjoy the autonomy to innovate and influence CoreWeave's security landscape directly.
  • Responsibilities include developing advanced threat detection capabilities, leading real-time security incident response, conducting proactive threat-hunting exercises, and collaborating with cross-functional teams.
  • This role requires a strong foundation in Linux or macOS internals, experience with multiple programming languages, and a deep understanding of modern TTP frameworks.
  • Concevoir des stratégies de détection avancées pour identifier et atténuer proactivement les menaces cybernétiques.
  • Collaborer avec des équipes interfonctionnelles pour améliorer la visibilité et l'efficacité de la détection de la sécurité.
  • Participer à des initiatives stratégiques en matière de sécurité, en contribuant votre expertise à l'architecture et aux contrôles de sécurité.

Requirements

  • Proven ability to deliver impactful projects spanning multiple technical domains and teams
  • Competency in writing detections in multiple languages (Python, Bash, Go, JavaScript, etc.)
  • Solid understanding of modern TTP frameworks such as MITRE ATT&CK and Cyber Kill Chain
  • This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency

Preferred

  • Strong foundational knowledge of Linux or macOS internals and their relevant event sources (eBPF, Endpoint Security Framework)
  • Experience collaborating closely with Purple and Red Teams, leveraging findings to enhance detection capabilities
  • Proficiency in at least one query language (e.g., SQL, Splunk Query Language, HiveQL)
  • Familiarity with Kubernetes fundamentals and enthusiasm to deepen your expertise
  • Extensive experience crafting custom alert logic within industry-standard tooling, like KQL, SQL, etc
  • Practical experience applying and contributing to the Incident Response Lifecycle methodology
  • Deep understanding of Kubernetes-specific detection and security challenges
  • Contributions to the open-source security community or experience developing detection tooling
  • Experience leveraging advanced analytics or machine learning techniques in detection engineering

Pay

USD 134,000 - 179,000