Senior Security Engineer, Vulnerability Management (AI)

Location: Livingston, NJ; New York, NY; Sunnyvale, CA; or Bellevue, WA, United States

Base salary: $165,000–$242,000 per year, plus discretionary bonus, equity awards, and benefits.

Company

CoreWeave provides cloud infrastructure, technology, tools, and services for building and scaling AI applications.

What you will do

• Set technical direction for major vulnerability management initiatives and improve visibility across infrastructure.
• Deploy and integrate security tooling and build automation that combines findings from multiple sources.
• Develop production LLM-based workflows and agents for validation, risk assessment, and remediation guidance.
• Investigate scanner findings, bug bounty reports, CVEs, and attack paths, then lead remediation across engineering teams.
• Participate in vulnerability response on-call rotations and lead technical investigations and post-mortems.
• Mentor engineers through design reviews, code reviews, and hands-on technical problem solving.

Requirements

• Experience owning a significant technical area in vulnerability management or a related security engineering discipline.
• Strong production software development experience with Python, Go, Rust, or a similar language, including testing, deployment, monitoring, and troubleshooting.
• Experience designing systems that process security data and integrate multiple services, including data models, APIs, performance, and failure handling.
• Hands-on experience building and evaluating production LLM-based workflows or agents.
• Strong understanding of Linux, containers, cloud, Kubernetes, vulnerability risk, CVSS, EPSS, and exploitation.
• Access to export-controlled information requires U.S. person status, eligibility without export authorization, or eligibility to obtain the required authorization.

Nice to have

• Experience with Wiz, Rapid7, CrowdStrike, Tines, or Jira.
• Experience with bug bounty, vulnerability disclosure, application security, cloud security, red team, penetration testing, blue team, or incident response.
• Experience building asset inventory, ownership mapping, external attack surface management, automated remediation, or attack-path analysis.
• Experience investigating firmware or hardware vulnerabilities in GPU infrastructure or server management interfaces.
• Experience building remediation reporting and evidence collection.

Culture & Benefits

• Entrepreneurial, collaborative environment focused on independent thinking and innovative solutions.
• Medical, dental, and vision insurance fully paid by CoreWeave for eligible U.S.-based full-time employees.
• Life, disability, mental wellness, family-forming, childcare, and parental leave benefits.
• 401(k) with employer match, tuition reimbursement, ESPP, and flexible PTO.
• Catered lunches at office and data center locations.