Security Engineer

Security Engineers at CoreWeave play a crucial role in supporting the security infrastructure and features of the CoreWeave Cloud and associated technologies. This position is integral to ensuring CoreWeave maintains leading security capabilities to protect the infrastructure and assets associated with CoreWeave customers. 

Core Responsibilities:

• Contribute to the development and execution of a comprehensive security strategy aligned with CoreWeave’s goals and objectives.
• Build from that strategy and take the front seat in figuring out complex security and product related problems.
• Collaborate with cross-functional teams, including Engineering, Product, Legal, IT, and Internal Audit, to integrate security best practices into the development and deployment of products and services.
• Assist in evaluating the efficacy of third-party and internally developed security controls.
• Utilize security automation, scripting, and third-party tools to address security issues and identify opportunities for automation in repeatable processes.
• Contribute to the definition and improvement of CoreWeave’s cybersecurity policies, standards, baselines, and secure design documentation.
• Participate in identifying and assessing potential security risks and vulnerabilities associated with the company's platform, systems, and infrastructure.
• Communicate security issues effectively to both technical and non-technical stakeholders.

Minimum Qualifications & Experience:

• 3+ years of experience in security engineering.
• Scripting experience to build & automate security related tasks.
• Hands-on experience with enterprise security components and protocols that make up services and solutions such as Vulnerability Management, Network Security, Security Orchestration, Security Information and Event Monitoring (SIEM), PKI, VPN, etc.
• Knowledge of Kubernetes infrastructure, on-premises network and compute architectures, and security aspects.
• Practical experience with compliance and regulatory frameworks (e.g. SOC2, ISO, GDPR, HIPAA, HITRUST, FedRAMP).

Nice to Have:

• Relevant security certifications.
• Understanding of OWASP Top 10 and the MITRE ATT&CK framework.
• Strong technical and communication skills.
• This role may involve occasional availability outside regular business hours to support critical issues, projects, or meetings. As CoreWeave is a fast-growth startup, the selected candidate should be flexible with their availability.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $175,000 in our lowest geographic market up to $220,000/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.

Hybrid Workplace

If you reside within a 30-mile radius of our New Jersey, New York, or Philadelphia offices, we're excited for you to join us at the office at least three times a week, recognizing the significance we place on fostering connections, collaboration, and creativity within our office culture. Our commitment to operating as a hybrid workplace underscores our dedication to enabling our employees to tailor their work-life balance to their individual preferences.