Senior Security Incident Response Engineer

CoreWeave; San Francisco (CA); On-site; USD 139,000 - 204,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with a generous employer match

Tuition Reimbursement

Paid Parental Leave

Flexible PTO

Job summary

CoreWeave is seeking an experienced Incident Response Lead to own and drive our most critical security incidents, from detection through resolution.

You will investigate threats across cloud, endpoint, identity, and network data, translate findings for senior leadership, and shape our threat-hunting program with AI-powered tooling. Join a fast-growing team protecting AI infrastructure.

Qualifications

• Extensive experience in incident response, security operations roles, and/or threat hunting at scale.
• Strong technical investigation and hunting skills — logs, telemetry, and raw system data.
• Deep familiarity with attacker TTPs across cloud, endpoint, identity, and network environments.
• Experience briefing senior leadership during active incidents with clarity and composure.
• Comfort leading and operating across organizational boundaries while owning outcomes.
• Proficiency in at least one query language (SQL, SPL, HiveQL).
• Ability to script or automate in Python, Go, or similar.

Responsibilities

• Leading the most complex, highest severity cybersecurity incidents at CoreWeave end-to-end – with full ownership of outcomes.
• Reading smoke — forming hypotheses about what's burning and a strategy to attack it.
• Serving as a clear, credible voice to senior leadership during active incidents.
• Conducting deep technical investigations and hunts across endpoint, cloud, identity, and network data sources.
• Producing rigorous, risk-driven post-incident reviews and durable improvements.
• Running a structured threat hunting program informed by intelligence and gaps.
• Architecting and building AI-powered tooling to counter threats and accelerate response.

Skills

Incident response

Security operations

Threat hunting

Leadership to senior leadership

Python/Go scripting

SQL / SPL / HiveQL

Tools

SOAR platforms

Case management tooling

Kubernetes

Job description

CoreWeave is seeking an experienced Incident Response Lead to own and drive our most critical security incidents, from detection through resolution.

You will investigate threats across cloud, endpoint, identity, and network data, translate findings for senior leadership, and shape our threat-hunting program with AI-powered tooling. Join a fast-growing team protecting AI infrastructure.