Senior Security Engineer (Vulnerability Management)

CoreWeave as a Staff Security Engineer, where you will lead the Vulnerability Management program. You will design and implement scalable systems for triage, prioritization, and remediation tracking across various domains.

You will also provide deep technical leadership on hardware-adjacent vulnerabilities and improve prioritization logic and severity models. The ideal candidate will have a strong development background, extensive experience in vulnerability management, and a deep understanding of security best practices.

Responsibilities

• Your role will involve setting technical standards, driving high-impact initiatives, and mentoring engineers.
• Concevoir et mettre en œuvre des systèmes évolutifs de triage, de priorisation et de suivi de la remédiation dans les domaines des applications, de l'infrastructure et du matériel.
• Diriger des initiatives techniques de gestion des vulnérabilités de haute complexité et fournir des décisions architecturales pour les domaines de programme assignés.
• Améliorer la logique de priorisation, les modèles de gravité et les flux de travail d'exception grâce au code, aux revues de conception et aux propositions techniques.
• Excellent development background with strong coding skills in Python, Go, or similar languages for building scalable, production-grade security systems
• Proven track record building and scaling security automation (SOAR workflows, AI/ML systems, detection pipelines) in production environments
• Demonstrated track record mentoring engineers across levels and driving cross-functional technical initiatives at organizational scale

Requirements

• 9+ years of relevant experience with demonstrated strategic impact in vulnerability management, application security, platform security, or cloud security engineering
• Significant experience with modern vulnerability management tooling (for example Wiz, Semgrep, Rapid7, Tenable, or equivalent)
• Strong business acumen and understanding of how security decisions impact engineering velocity, customer trust, and business outcomes
• Experience with specialized infrastructure: GPU/DPU environments, firmware security, hardware vulnerabilities, or high-performance computing
• Production experience with security automation platforms such as TINES and serverless frameworks (AWS Lambda, GCP Cloud Functions)
• Strong DevOps, DevSecOps, or SRE background with deep experience in AWS/GCP/Azure cloud services and Infrastructure as Code (Terraform, CloudFormation)

Preferred

• Deep subject matter expertise with vulnerability management best practices: CVSS, EPSS, CISA KEV, threat intelligence integration, and risk-based prioritization frameworks
• Practical experience building AI/ML-powered security systems (LLM integration, automated decision-making, human-in-the-loop validation) in production
• Deep understanding of Kubernetes security (container scanning, admission controllers, supply chain security, runtime protection)
• Experience leading security programs through rapid hypergrowth (10x+ infrastructure scaling) in startup or cloud-native environments
• Practical experience managing vulnerabilities within a FedRAMP-certified environment or similar regulatory frameworks

Pay

USD 139,000 - 204,000

Join

Experience managing hardware vendor security partnerships (embargoed disclosures and pre-release collaboration)