Security Operations Engineer

CoreWeave; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

CoreWeave is seeking a Security Operations Engineer II to focus on security event triage and incident response. You will independently triage, escalate, and respond to day-to-day events and contribute to detection and response capabilities under the guidance of senior engineers.

This role supports a 24/7/365 SOC with rotating on-call for nights and weekends, uses SIEM/EDR tools, and collaborates with threat intelligence and detection engineering teams to strengthen CoreWeave's security posture.

Qualifications

• 1–2+ years of experience in security operations, SOC analysis, incident response, forensics, or related field.
• Working knowledge of Linux and MacOS systems, including logging and common forensic artifacts.
• Exposure to Kubernetes and securing containerized environments.
• Familiarity with modern security tools and platforms such as SIEM, EDR, IDS/IPS, and firewalls.

Responsibilities

• Triage, escalate, and perform first-line incident response on day-to-day security events.
• Monitor Linux, MacOS, Kubernetes environments using SIEM/EDR tools.
• Contribute to detection and response capabilities under guidance of senior engineers.
• Maintain runbooks and collaborate with threat intelligence and detection teams.

Skills

Security operations

SOC analysis

Incident response

Forensics

Education

Bachelor's degree in Computer Science/Engineering/Cyber Security/IT or equivalent

Tools

SIEM

EDR

IDS/IPS

Firewalls

Job description

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com.

What You'll Do

The 24x7 Security Operations team monitors, analyzes, and responds to security events across Linux, MacOS, and Kubernetes environments to protect CoreWeave's infrastructure and ecosystem.

About The Role

As a Security Operations Engineer II, you will specialize in security event triaging and incident response. You will independently perform triage, escalation, and first-line incident response on day-to-day security events, and contribute to detection and response capabilities under the guidance of senior engineers. In this role, you will be part of a 24/7/365 SOC requiring rotating on-call coverage for overnights and weekends (compliant with local labor regulations), utilize SIEM/EDR tools, support containment/remediation, contribute to detections-as-code, maintain runbooks, and collaborate across threat intelligence and detection engineering teams.

Who You Are

• 1–2+ years of experience in security operations, SOC analysis, incident response, forensics, or a related field (relevant internship and academic experience considered).
• Working knowledge of Linux and MacOS systems, including logging and common forensic artifacts.
• Exposure to Kubernetes and an interest in securing containerized environments.
• Familiarity with modern security tools and platforms such as SIEM, EDR, IDS/IPS, and firewalls.
• Solid understanding of network protocols, firewalls, VPNs, proxies, and other security technologies.
• Degree in Computer Science, Computer Engineering, Cyber Security, Information Technology, or equivalent experience.

Preferred

• Strong analytical skills with the ability to interpret data and translate it into actionable insights.
• Excellent communication and collaboration skills with proven effectiveness in high-pressure situations.
• Drive to continuously build skills across the threat landscape, security tooling, and CoreWeave's environment.

Wondering if you're a good fit?

We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams—even if you aren't a 100% skill or experience match. Here are a few qualities we've found compatible with our team. If some of this describes you, we'd love to talk.

• You love to investigate security anomalies and turn complex event data into actionable defenses.
• You're curious about containerized infrastructure, cloud threat detection, and evolving attack vectors in modern environments.
• You're an expert in staying calm under pressure, rigorously documenting incident response workflows, and collaborating across teams to resolve security incidents.

Why CoreWeave?

At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values:

• Be Curious at Your Core
• Act Like an Owner
• Empower Employees
• Deliver Best-in-Class Client Experiences
• Achieve More Together

About

We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organisation's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us!

The starting salary will be determined by job-related knowledge, skills, experience, and the market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).