Senior Detection Engineer — Threat & Incident Response

CoreWeave; Sunnyvale (CA); On-site; USD 165,000 - 242,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company-paid Life Insurance

401(k) with employer match

Flexible PTO

Tuition Reimbursement

ESPP participation

Job summary

CoreWeave in Sunnyvale, CA, is seeking a security detection engineer to design and implement advanced threat detection strategies at scale. You will collaborate with Purple/Red Teams and cross-functional groups to enhance security visibility and drive proactive threat hunting.

The role involves real-time incident response, custom detection logic, and staying ahead of evolving threats. A strong emphasis on MITRE ATT&CK, eBPF, and multi-language detections is required.

Qualifications

• Proven ability to deliver impactful projects spanning multiple technical domains and teams.
• Extensive experience crafting custom alert logic within industry-standard tooling, like KQL, SQL, etc.
• Familiarity with Kubernetes fundamentals and enthusiasm to deepen your expertise.
• Experience collaborating closely with Purple and Red Teams, leveraging findings to enhance detection capabilities.
• Solid understanding of modern TTP frameworks such as MITRE ATT&CK and Cyber Kill Chain.
• Proficiency in at least one query language (e.g., SQL, Splunk Query Language, HiveQL).
• Competency in writing detections in multiple languages (Python, Bash, Go, JavaScript, etc.)
• Strong foundational knowledge of Linux or macOS internals and their relevant event sources (eBPF, Endpoint Security Framework)
• Practical experience applying and contributing to the Incident Response Lifecycle methodology

Responsibilities

• Design cutting-edge detection strategies at scale.
• Collaborate with peers in an innovative environment focused on excellence.
• Enjoy autonomy to influence CoreWeave’s security landscape directly.
• Develop and implement advanced threat detection capabilities to proactively identify and mitigate threats.
• Craft precise and efficient custom detection logic tailored to evolving threat landscapes.
• Lead and/or participate in real-time security incident response and remediation.
• Conduct proactive threat-hunting exercises to uncover hidden vulnerabilities.
• Collaborate with cross-functional teams to enhance security visibility and detection effectiveness.
• Stay informed about emerging threats and detection methodologies.
• Contribute to security architecture and controls and participates in security assessments.
• Engage in ambiguous problem solving and innovative solutions when needed.

Skills

KQL/SQL

Kubernetes basics

MITRE ATT&CK

Incident Response Lifecycle

Python/Bash/Go/JavaScript

Linux/macOS internals

Education

Bachelor's degree or equivalent in a related field

Tools

Kubernetes

Splunk/SIEM tooling

Job description

CoreWeave in Sunnyvale, CA, is seeking a security detection engineer to design and implement advanced threat detection strategies at scale. You will collaborate with Purple/Red Teams and cross-functional groups to enhance security visibility and drive proactive threat hunting.

The role involves real-time incident response, custom detection logic, and staying ahead of evolving threats. A strong emphasis on MITRE ATT&CK, eBPF, and multi-language detections is required.