3 hours ago
Base Salary
$139k - $204k/yr
Responsibilities
- Own vulnerability management technical projects end to end and contribute to architecture decisions.
- Build and maintain production-grade triage automation, integrations, decision logic, and workflow components.
- Implement processes from vulnerability assessment and detection through ticket routing and remediation tracking.
- Investigate hardware-adjacent vulnerabilities involving GPU firmware, DPU firmware/BlueField, and BMC surfaces.
- Support responses to embargoed disclosures and zero-day events with engineering owner teams.
- Develop prioritization logic, severity models, exception workflows, technical metrics, and risk reporting.
- Perform root-cause analysis for vulnerability incidents and implement technical improvements.
- Collaborate with security, engineering, and operational stakeholders, conduct code reviews, document systems, and help onboard teammates.
Requirements
- At least 5 years of relevant experience in vulnerability management, application security, platform security, or cloud security engineering.
- Production experience building security automation, SOAR workflows, AI/ML systems, or detection pipelines.
- Working knowledge of CVSS, EPSS, CISA KEV, threat intelligence integration, and risk-based prioritization.
- Strong development skills in Python, Go, or similar languages for production security systems.
- Hands-on experience with vulnerability management tools such as Wiz, Semgrep, Rapid7, Tenable, or equivalent.
- Experience delivering technical projects collaboratively across teams.
- Understanding of how security decisions affect engineering velocity, customer trust, and business outcomes.
- Preferred qualifications include AI/ML-powered security systems, LLM integration, TINES, AWS Lambda, GCP Cloud Functions, AWS/GCP/Azure, Terraform, CloudFormation, Kubernetes security, FedRAMP environments, firmware security, and hardware vendor security work.
Benefits
- Base salary range is $139,000–$204,000, with discretionary bonus, equity awards, and a comprehensive benefits program.
- Medical, dental, and vision insurance are 100% paid by CoreWeave for US-based full-time employees.
- Benefits include company-paid life insurance, supplemental life insurance, short- and long-term disability insurance, FSA, HSA, tuition reimbursement, ESPP, mental wellness benefits, family-forming support, paid parental leave, childcare support, and a 401(k) with employer match.
- Flexible PTO, catered lunch at office and data center locations, a casual work environment, and an innovation-focused culture are offered.
Categories
About CoreWeave
CoreWeave provides a GPU-accelerated cloud for AI training and inference, VFX, and rendering, with bare-metal instances, Kubernetes orchestration, and managed services to scale workloads. It sells on-demand and reserved capacity to AI labs, startups, and enterprises, and offers SaaS tools and hands-on support for deployment. Founded in 2017 and headquartered in New York, it is publicly traded on Nasdaq under the ticker CRWV.