Senior Cloud IR & Threat Hunting Lead

CoreWeave; Livingston (NJ); On-site; USD 139,000 - 204,000; Full time

Benefits offered by this job

Medical insurance

Life Insurance

Disability insurance

401(k) with match

Flexible PTO

Tuition Reimbursement

ESPP

Job summary

CoreWeave is looking for an Advanced Response Team lead to own and drive the most critical cybersecurity incidents from start to finish. You will investigate, hunt, and coordinate responses across endpoints, cloud, and networks while translating technical details into executive risk decisions.

You will shape threat intel integration, run simulations, and build AI-assisted tooling to accelerate responses. A strong hands-on background and ability to work outside regular hours is required.

Qualifications

• Extensive incident response experience and ownership of high-impact incidents.
• Strong investigation and hunting skills with logs and telemetry.
• Familiarity with attacker TTPs across cloud, endpoint, identity and network.
• Experience briefing senior leadership during active incidents.
• Ability to lead across organizational boundaries while owning outcomes.
• Proficiency in at least one query language (SQL, Splunk, HiveQL).
• Scripting or automation in Python or Go to close gaps.

Responsibilities

• Lead complex cybersecurity incidents end-to-end with ownership of outcomes.
• Form hypotheses from 'smoke' and develop attack strategies.
• Brief senior leadership during active incidents with clear risk framing.
• Conduct deep investigations across endpoint, cloud, identity, and network data.
• Produce post-incident reviews with durable improvements.
• Run threat hunting programs using intelligence and campaign data.
• Develop AI-powered tooling to enhance detection and response.

Skills

Incident response

Security operations

Threat hunting

SQL

Splunk

HiveQL

Python

Go

Tools

Kubernetes

SOAR platforms

Case management tooling

Job description

CoreWeave is looking for an Advanced Response Team lead to own and drive the most critical cybersecurity incidents from start to finish. You will investigate, hunt, and coordinate responses across endpoints, cloud, and networks while translating technical details into executive risk decisions.

You will shape threat intel integration, run simulations, and build AI-assisted tooling to accelerate responses. A strong hands-on background and ability to work outside regular hours is required.