Senior Security Engineer I, Vulnerability Management
About the position
We are seeking a Security Engineer to join CoreWeave's Vulnerability Management team. This is an execution-focused role: you will perform hands-on triage, drive remediation follow-through, and improve day-to-day operational quality across cloud and specialized infrastructure environments.
You will work closely with other security engineers to support high-priority vulnerability response, improve automation quality, and build strong security judgment. This role is ideal for engineers who want meaningful ownership, fast learning, and a clear growth path toward senior scope.
Responsibilities
• Perform hands-on vulnerability triage and risk assessment using team-defined standards and playbooks
• Track remediation progress with owner teams, escalate blockers, and ensure clean issue closure
• Support automated triage workflows by validating outputs and improving signal quality
• Contribute to automated remediation campaigns (for example EOL cleanup, vulnerable software upgrades, and fix verification)
• Support zero-day and embargo response by helping inventory affected assets and tracking owner-team deployment status
• Participate in incident investigations by gathering technical evidence and supporting impact analysis
• Participate in on-call rotation for critical vulnerability events
• Maintain high-quality documentation, runbooks, and operational updates
• Identify process gaps and contribute practical workflow improvements that reduce manual toil
Requirements
• 3+ years of relevant experience in vulnerability management, security operations, application security, or related security engineering
• Strong understanding of vulnerability assessment fundamentals (CVSS, exploitability, risk prioritization, remediation tradeoffs)
• Hands-on experience with one or more vulnerability management platforms (for example Wiz, Rapid7, Qualys, Tenable, or equivalent)
• Proficiency in scripting/automation for workflow support (Python, Bash, or similar)
• Familiarity with cloud security concepts (AWS, GCP, Azure) and common infrastructure vulnerabilities
• Strong written and verbal communication skills for cross-functional collaboration
• Demonstrated execution ownership in operational security work
Nice-to-haves
• Exposure to security automation/SOAR platforms (for example Tines, Splunk SOAR, or equivalent)
• Experience with container/Kubernetes vulnerability workflows
• Familiarity with hardware-adjacent vulnerability domains (GPU/DPU firmware, BMC/IPMI)
• Experience supporting compliance evidence collection (SOC 2, ISO 27001, FedRAMP, or similar)
• Experience in high-growth or fast-moving infrastructure environments
• Exposure to AI-assisted security workflows and human-in-the-loop validation
Benefits
• Medical, dental, and vision insurance - 100% paid for by CoreWeave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption
Apply Now
Apply Now
We are seeking a Security Engineer to join CoreWeave's Vulnerability Management team. This is an execution-focused role: you will perform hands-on triage, drive remediation follow-through, and improve day-to-day operational quality across cloud and specialized infrastructure environments.
You will work closely with other security engineers to support high-priority vulnerability response, improve automation quality, and build strong security judgment. This role is ideal for engineers who want meaningful ownership, fast learning, and a clear growth path toward senior scope.
Responsibilities
• Perform hands-on vulnerability triage and risk assessment using team-defined standards and playbooks
• Track remediation progress with owner teams, escalate blockers, and ensure clean issue closure
• Support automated triage workflows by validating outputs and improving signal quality
• Contribute to automated remediation campaigns (for example EOL cleanup, vulnerable software upgrades, and fix verification)
• Support zero-day and embargo response by helping inventory affected assets and tracking owner-team deployment status
• Participate in incident investigations by gathering technical evidence and supporting impact analysis
• Participate in on-call rotation for critical vulnerability events
• Maintain high-quality documentation, runbooks, and operational updates
• Identify process gaps and contribute practical workflow improvements that reduce manual toil
Requirements
• 3+ years of relevant experience in vulnerability management, security operations, application security, or related security engineering
• Strong understanding of vulnerability assessment fundamentals (CVSS, exploitability, risk prioritization, remediation tradeoffs)
• Hands-on experience with one or more vulnerability management platforms (for example Wiz, Rapid7, Qualys, Tenable, or equivalent)
• Proficiency in scripting/automation for workflow support (Python, Bash, or similar)
• Familiarity with cloud security concepts (AWS, GCP, Azure) and common infrastructure vulnerabilities
• Strong written and verbal communication skills for cross-functional collaboration
• Demonstrated execution ownership in operational security work
Nice-to-haves
• Exposure to security automation/SOAR platforms (for example Tines, Splunk SOAR, or equivalent)
• Experience with container/Kubernetes vulnerability workflows
• Familiarity with hardware-adjacent vulnerability domains (GPU/DPU firmware, BMC/IPMI)
• Experience supporting compliance evidence collection (SOC 2, ISO 27001, FedRAMP, or similar)
• Experience in high-growth or fast-moving infrastructure environments
• Exposure to AI-assisted security workflows and human-in-the-loop validation
Benefits
• Medical, dental, and vision insurance - 100% paid for by CoreWeave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption
Apply Now
Apply Now