Director of Product Security and Offensive Security

Coreweave; Bellevue (WA); On-site; USD 227,000 - 303,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer match

Tuition Reimbursement

Stock Purchase Program

Job summary

CoreWeave is seeking a Director of Product Security to lead this organization. This is a highly technical leadership role focused on building security that operates at machine speed, with threat modeling and proactive defense across products and AI tooling.

You will own the strategy and roadmap for product security, lead managers and senior engineers, and establish a secure development lifecycle across the company.

Qualifications

• 10+ years in security or software engineering, with significant time in application security, vulnerability management, or offensive security.
• 5+ years of security leadership experience, including managing managers and scaling a multi-team organization.
• Proven track record of building or running a product security program at a cloud provider, security company, or large-scale SaaS business.
• Experience taking over existing teams and integrating them into one organization.
• A track record of moving engineering leaders on architecture and roadmap decisions you don't own.
• A strong bias for action. You're scrappy, you move fast, and you own the outcome.
• Hands‑on depth in modern application security and threat modeling.
• Experience operating a vulnerability management program at scale with metrics and SLAs.
• Direct experience with offensive security, red team or pentesting.
• Familiarity with Kubernetes, cloud infrastructure, and CI/CD.
• Experience building and mentoring diverse, high-performing teams.

Responsibilities

• Define and drive the strategy and roadmap for Product Security at CoreWeave, spanning application security, vulnerability management, offensive security, AI product security, and product vulnerability response.
• Lead and grow a multi-team organization of managers and senior ICs, including hiring the engineering managers who will run each function.
• Build an agentic-first vulnerability program where agents discover, triage, and remediate issues at scale.
• Own vulnerability management end to end across CoreWeave's infrastructure and products: discovery, prioritization, SLAs, remediation, and reporting to executive leadership.
• Run a tiered offensive security program that combines continuous agentic testing, third party assessments, internal team, and external researchers.
• Bring offensive security to bear on tenant isolation across GPUs, bare metal, and Kubernetes.
• Establish secure development lifecycle across the business including threat modeling, secure design review, and security tooling in CI/CD.
• Own security for CoreWeave's AI products and AI tooling including model and dataset supply chain, agent tooling, and provenance of AI-generated code.
• Stand up and run product vulnerability response (PSIRT): intake, coordinated disclosure, customer communication, and fixes across the product portfolio.
• Embed Product Security Partners in critical product areas with authority to make design-time security decisions.

Skills

Security leadership

AppSec depth

Vulnerability management

Offensive security

Cloud security

Kubernetes

CI/CD

Threat modeling

Architecture decisions

Hiring & mentoring

Tools

Kubernetes

CI/CD

Job description

CoreWeave is seeking a Director of Product Security to lead this organization. This is a highly technical leadership role focused on building security that operates at machine speed, with threat modeling and proactive defense across products and AI tooling.

You will own the strategy and roadmap for product security, lead managers and senior engineers, and establish a secure development lifecycle across the company.