Senior Security Engineer, Vulnerability Management

CoreWeave; Sunnyvale (CA); On-site; USD 188,000 - 275,000; Full time

Benefits offered by this job

Medical, dental, & vision insurance (1

Company-paid Life Insurance

Flexible PTO

401(k) with employer match

Tuition Reimbursement

ESPP

Job summary

CoreWeave, The Essential Cloud for AI, seeks a Staff Security Engineer to lead vulnerability management initiatives across application, infrastructure, and hardware domains. You will guide triage automation, design scalable workflows, and coordinate with leadership on priorities and risk mitigation.

You will mentor engineers, set technical standards, and drive security programs in a high-growth cloud environment, including ownership of embargoed disclosures and zero-day responses.

Qualifications

• 9+ years of relevant experience in vulnerability management, application security, platform security, or cloud security engineering.
• Proven track record building and scaling security automation (SOAR workflows, AI/ML systems, detection pipelines) in production.
• Deep subject matter expertise with vulnerability management best practices: CVSS, EPSS, CISA KEV, threat intel integration, and risk-based prioritization frameworks.
• Excellent development background with strong coding skills in Python, Go, or similar languages for building scalable security systems.
• Significant experience with modern vulnerability management tooling (e.g., Wiz, Semgrep, Rapid7, Tenable).
• Experience with hardware-adjacent vulnerabilities and high-performance computing environments.
• Demonstrated ability mentoring engineers and driving cross-functional initiatives at scale.
• Strong business acumen and understanding of how security decisions affect velocity and outcomes.

Responsibilities

• Lead high-complexity VM initiatives and deliver architecture decisions for assigned program areas.
• Design and build scalable triage automation, including integrations, decision logic, and production hardening.
• Implement end-to-end workflow components from assessment to ticket routing and remediation tracking.
• Provide deep technical leadership on hardware security concerns (GPU/DPU firmware, BMC surfaces).
• Coordinate with owner teams to respond to embargoed disclosures and zero-day events.
• Improve prioritization logic, severity models, and exception workflows through reviews and proposals.
• Produce actionable technical metrics and risk insights for leadership.
• Lead root-cause analysis for high-impact vulnerability incidents and implement durable improvements.
• Mentor IC3/IC4/IC5 engineers through design guidance and incident coaching.
• Partner with security, engineering, and operations to accelerate remediation outcomes.

Skills

Vulnerability management

Application security

Platform security

Cloud security engineering

Python/Go coding

SOAR workflows

AI/ML security

Security tooling

Hardware vulnerability

Mentoring engineers

Security metrics

Tools

Wiz

Semgrep

Rapid7

Tenable

Terraform

CloudFormation

Job description

CoreWeave, The Essential Cloud for AI, seeks a Staff Security Engineer to lead vulnerability management initiatives across application, infrastructure, and hardware domains. You will guide triage automation, design scalable workflows, and coordinate with leadership on priorities and risk mitigation.

You will mentor engineers, set technical standards, and drive security programs in a high-growth cloud environment, including ownership of embargoed disclosures and zero-day responses.