SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 165,000 - 242,000 / annual
CoreWeave is The Essential Cloud for AI™, a publicly traded company (Nasdaq: CRWV as of March 2025) providing cloud infrastructure optimized for AI workloads. The Vulnerability Management team finds and tracks security weaknesses across CoreWeave's infrastructure and works with engineering teams to remediate them.
In this Senior Security Engineer role, you will set technical direction for major areas of Vulnerability Management, identify gaps in visibility, and lead deployment and integration of security tooling. You'll design and build automation that brings together findings from multiple sources, including LLM-based workflows and agents for validation, risk assessment, and remediation guidance. You'll establish how the team tests and monitors accuracy in production.
You'll lead complex investigations involving scanner findings, bug bounty reports, and new CVEs, examining how weaknesses combine into attack paths and helping teams choose effective fixes. You'll drive remediation efforts across engineering teams, resolve technical blockers, and improve systems and processes that slow vulnerability burndown. You'll participate in the vulnerability response on-call rotation, lead technical investigations and post-mortems for urgent vulnerability events, and mentor engineers through design reviews, code reviews, and hands-on problem solving.
This is a high-impact role at a rapidly growing, publicly traded infrastructure company serving leading AI labs, startups, and global enterprises. You'll work with best-in-class talent in a fast-paced environment focused on innovation and collaboration.
**Requirements:**
- Significant experience owning a technical area within vulnerability management or related security engineering discipline, including deciding what to build and following through on operation and maintenance
- Strong software development experience in Python, Go, Rust, or similar language
- Experience designing, building, and maintaining production services, including automated testing, deployment, monitoring, and troubleshooting
- Experience leading software design for systems that process security data and integrate multiple services; ability to make and explain architectural decisions about data models, APIs, performance, and failure handling
- Hands-on experience building LLM-based workflows or agents for production use, including evaluating accuracy, understanding limitations, investigating failure cases, and establishing where human review is needed
- Strong understanding of Linux, containers, cloud, and Kubernetes, with experience investigating vulnerabilities and weighing remediation options against operational constraints
- Experience assessing how exposure, exploitability, trust relationships, and existing controls affect vulnerability risk; ability to use CVSS, EPSS, and known exploitation data to explain remediation priorities
- Experience leading technical work across engineering teams, collaborating with multiple stakeholders, resolving disagreements, and improving systems that multiple teams depend on
- Experience mentoring engineers and establishing engineering practices that improve code quality, testing, and reliability
**Preferred Skills:**
- Working with Wiz, Rapid7, CrowdStrike, or similar security platforms, and workflow tools such as Tines and Jira
- Improving bug bounty or vulnerability disclosure programs
- Application security, cloud security, red team, penetration testing, blue team, or incident response experience
- Building systems for asset inventory, ownership mapping, external attack surface management, automated remediation, or attack path analysis
- Investigating firmware or hardware vulnerabilities in GPU infrastructure or server management interfaces
- Building reporting and evidence collection systems
