Senior Security Engineer, Vulnerability Management

CoreWeave is an AI infrastructure company providing cloud compute platforms for artificial intelligence workloads. This Senior Security Engineer role leads vulnerability management initiatives across infrastructure, building tools and automation to identify, assess, and remediate security weaknesses while mentoring engineering teams.

* Set technical direction for major vulnerability management areas and identify gaps in security visibility across infrastructure * Design and build automation systems that integrate findings from multiple sources using LLM-based workflows for validation and risk assessment * Lead complex vulnerability investigations involving scanner findings, CVEs, and bug bounty reports, analyzing attack paths and remediation options * Drive remediation efforts across engineering teams, resolve technical blockers, and improve systems slowing vulnerability burndown * Participate in on-call vulnerability response rotation and lead technical investigations and post-mortems for security events

* Experience owning significant technical areas in vulnerability management or related security discipline, with responsibility for design and operational maintenance * Strong software development experience in Python, Go, Rust, or similar languages with production service design, deployment, monitoring, and troubleshooting * Experience designing production services that process security data and integrate multiple systems with strong architectural decision-making ability * Hands-on experience building LLM-based workflows or agents for production use, including evaluating accuracy and establishing human review needs * Strong understanding of Linux, containers, cloud, Kubernetes with experience investigating vulnerabilities and weighing remediation against operational constraints * Experience leading technical work across engineering teams, collaborating with stakeholders, and mentoring engineers on practices that improve code quality and reliability

* Experience with security platforms such as Wiz, Rapid7, CrowdStrike, or workflow tools like Tines and Jira * Experience improving bug bounty or vulnerability disclosure programs and coordinating fixes with researchers * Application security, cloud security, red team, penetration testing, or incident response background * Experience with asset inventory systems, ownership mapping, external attack surface management, or automated remediation tools * Experience investigating firmware or hardware vulnerabilities in GPU infrastructure or server management interfaces