Senior Threat Detection & Incident-Response Engineer

Coreweave; New York, California (NY, MO); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Company-paid Life Insurance

Tuition Reimbursement

401(k) with employer match

Flexible PTO

Catered lunch

Casual work environment

On-call support for incidents

Job summary

CoreWeave is seeking a security engineer to design and implement advanced threat detection at scale within our AI-focused cloud. You will develop customized detection logic and work with Purple/Red Teams to strengthen defenses.

You will collaborate with cross-functional teams, stay ahead of emerging threats, and participate in incident response when needed in a fast-paced, on-call environment.

Qualifications

• Proven ability to deliver impactful projects across multiple technical domains.
• Extensive experience crafting custom alert logic with KQL, SQL, etc.
• Familiarity with Kubernetes fundamentals.
• Experience collaborating with Purple and Red Teams to improve detection.
• Strong knowledge of MITRE ATT&CK and Cyber Kill Chain.
• Proficiency in at least one query language (SQL, Splunk, HiveQL).
• Competency writing detections in Python, Bash, Go, JS.
• Knowledge of Linux/macOS internals and event sources (eBPF).
• Experience with Incident Response Lifecycle methodology.

Responsibilities

• Develop and implement advanced threat detection capabilities.
• Craft precise and efficient custom detection logic for evolving threat landscapes.
• Lead or participate in real-time security incident response, threat containment, and remediation.
• Conduct proactive threat-hunting to uncover hidden vulnerabilities and anticipate threats.
• Collaborate closely with cross-functional teams to enhance security visibility and detection effectiveness.
• Continuously researching and staying informed about emerging threats, attack vectors, and detection methodologies.
• Participate in strategic security initiatives, contributing to security architecture and controls.
• Engage in security assessments to uphold our high standards for security and compliance.
• Occasionally, drawing the owl - innovative solutions in ambiguous situations.

Skills

Project delivery

Custom alert logic

Kubernetes basics

Purple/Red Team collaboration

MITRE ATT&CK

Query languages

Detections in multiple languages

Linux/macOS internals

Incident Response Lifecycle

Tools

KQL

SQL

Splunk

HiveQL

eBPF

Job description

CoreWeave is seeking a security engineer to design and implement advanced threat detection at scale within our AI-focused cloud. You will develop customized detection logic and work with Purple/Red Teams to strengthen defenses.

You will collaborate with cross-functional teams, stay ahead of emerging threats, and participate in incident response when needed in a fast-paced, on-call environment.