SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 165,000 - 242,000 / annual
CoreWeave is a publicly traded AI infrastructure company (Nasdaq: CRWV, founded 2017) providing cloud compute optimized for AI workloads. The Vulnerability Management team identifies and tracks security weaknesses across CoreWeave's infrastructure, assesses their exploitability and business impact, and works with engineering teams to remediate them.
In this Senior Security Engineer role, you will set technical direction for major areas of vulnerability management and lead the deployment of security tooling to close visibility gaps. You'll design and build automation that aggregates findings from multiple sources, incorporating LLM-based workflows and agents for validation, risk assessment, and remediation guidance. You'll establish how these systems are tested and monitored for accuracy in production.
You'll lead complex investigations involving scanner findings, bug bounty reports, and new CVEs, examining how vulnerabilities combine into attack paths and helping teams select effective fixes. You'll drive remediation efforts across engineering teams, resolve technical blockers, and improve systems and processes that slow vulnerability burndown. You'll participate in the vulnerability response on-call rotation, lead technical investigations and post-mortems for urgent events, and mentor engineers through design reviews, code reviews, and hands-on problem solving.
This is a high-impact role at a hyper-growth stage company where you'll work alongside top security and infrastructure talent, with significant opportunity to shape how a major AI infrastructure provider approaches vulnerability management at scale.
**Requirements:**
- Proven experience owning a significant technical area within vulnerability management or related security engineering discipline, including decisions about what to build and responsibility for operation and maintenance
- Strong software development experience in Python, Go, Rust, or similar language
- Demonstrated experience designing, building, and maintaining production services with automated testing, deployment, monitoring, and troubleshooting
- Experience leading software design for systems that process security data and integrate multiple services; ability to make and explain architectural decisions about data models, APIs, performance, and failure handling
- Hands-on experience building LLM-based workflows or agents for production use, including evaluating accuracy, understanding limitations, investigating failures, and establishing where human review is needed
- Strong understanding of Linux, containers, cloud, and Kubernetes, with experience investigating vulnerabilities and weighing remediation options against operational constraints
- Experience assessing how exposure, exploitability, trust relationships, and existing controls affect vulnerability risk; ability to use CVSS, EPSS, and known exploitation data to explain remediation priorities
- Demonstrated experience leading technical work across engineering teams, collaborating with multiple stakeholders, resolving disagreements, and improving systems that multiple teams depend on
- Experience mentoring engineers and establishing engineering practices that improve code quality, testing, and reliability
**Preferred Skills:**
- Experience with security platforms (Wiz, Rapid7, CrowdStrike) and workflow tools (Tines, Jira)
- Background improving bug bounty or vulnerability disclosure programs
- Application security, cloud security, red team, penetration testing, blue team, or incident response experience
- Experience building systems for asset inventory, ownership mapping, external attack surface management, automated remediation, or attack path analysis
- Firmware or hardware vulnerability investigation experience in GPU infrastructure or server management interfaces
- Building reporting and evidence collection systems for remediation tracking
