Create and improve detections-as-code, investigation procedures, automation, runbooks, and response workflows.
Perform post-incident reviews and recommend improvements to security controls and response capabilities.
Partner with threat intelligence and detection engineering teams to prepare for emerging threats and address gaps in coverage.
Serve as an escalation point and mentor for junior engineers, providing guidance during investigations and reviewing their work.
Lead scoped operational and technical improvement projects that increase the effectiveness and scalability of the SOC.
Who You Are
3–5+ years of experience in security operations, incident response, digital forensics, detection engineering, or a related field.
Strong experience investigating and responding to security events with limited or incomplete information.
Strong working knowledge of Linux and macOS systems, including system internals, logging, and common forensic artifacts.
Experience investigating Kubernetes or container security events.
Proficiency with modern security tools and platforms, including SIEM, EDR, IDS/IPS, and firewalls.
Strong understanding of network protocols, VPNs, proxies, identity systems, and other security technologies.
Experience developing or tuning security detections, preferably using detections-as-code.
Ability to manage complex investigations, communicate risk clearly, and make sound decisions in high-pressure situations.
Experience mentoring less-experienced engineers and collaborating effectively across teams and time zones.
Degree in Computer Science, Computer Engineering, Cyber Security, Information Technology, or equivalent practical experience.
Preferred Qualifications
Experience securing cloud infrastructure or large-scale production environments.
Experience using Python or another scripting language to automate security workflows.
Familiarity with incident response in Kubernetes-based infrastructure.
Experience collaborating with detection engineering, threat intelligence, or software engineering teams.
A demonstrated commitment to staying current with emerging threats, security technologies, and industry best practices.
The base salary range for this role is $134,000 to $179,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).
What We Offer
In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include:
Medical, dental, and vision insurance - 100% paid for by CoreWeave
Company-paid Life Insurance
Voluntary supplemental life insurance
Short and long-term disability insurance
Flexible Spending Account
Health Savings Account
Tuition Reimbursement
Ability to Participate in Employee Stock Purchase Program (ESPP)
Mental Wellness Benefits through Spring Health
Family-Forming support provided by Carrot
Paid Parental Leave
Flexible, full-service childcare support with Kinside
401(k) with a generous employer match
Flexible PTO
Catered lunch each day in our office and data center locations
A casual work environment
A work culture focused on innovative disruption
California Applicants
California Consumer Privacy Act
Equal Opportunity & Accommodations
CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.
As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: careers@coreweave.com.
Export Control Compliance
This position requires access to technology and/or source code subject to U.S. export control laws. Any such access will be provided only in compliance with applicable U.S. export control requirements. As part of the recruitment process, CoreWeave may request limited information reasonably necessary to assess applicable export-control requirements.
