Staff Security Engineer - Vulnerability Management Lead

Coreweave; Livingston; On-site; GBP 120,000 - 170,000; Full time

Job summary

CoreWeave is seeking a Staff Security Engineer to lead the most complex technical work in Vulnerability Management. You will design scalable triage, prioritization, and remediation-tracking systems across application, infrastructure, and hardware domains, while mentoring engineers and partnering with leadership on priorities.

You will drive architecture decisions for VM program areas, improve prioritization models, and lead incident response for embargoed disclosures and zero-day events.

Qualifications

• 9+ years of relevant experience with demonstrated strategic impact in vulnerability management or cloud security.
• Proven track record building and scaling security automation in production environments.
• Mentoring engineers across levels and driving cross-functional initiatives at scale.
• Deep expertise with vulnerability management practices and risk-based prioritization.

Responsibilities

• Lead high-complexity VM initiatives and set architecture decisions for program areas.
• Design scalable triage, prioritization, and remediation-tracking systems.
• Provide deep technical leadership for hardware-adjacent vulnerabilities and embargoed disclosures.
• Mentor IC3/IC4/IC5 engineers and collaborate with stakeholders to accelerate remediation.

Skills

Python

Go

Security automation

Vulnerability management

Cloud security

Leadership

Tools

Wiz

Semgrep

Tenable

Rapid7

Terraform

Kubernetes

AWS/GCP/Azure

Job description

CoreWeave is seeking a Staff Security Engineer to lead the most complex technical work in Vulnerability Management. You will design scalable triage, prioritization, and remediation-tracking systems across application, infrastructure, and hardware domains, while mentoring engineers and partnering with leadership on priorities.

You will drive architecture decisions for VM program areas, improve prioritization models, and lead incident response for embargoed disclosures and zero-day events.