Staff Security Engineer (Vulnerability Management)

Join CoreWeave as a Staff Security Engineer, where you will lead the Vulnerability Management program and design scalable systems for triage, prioritization, and remediation tracking. You will set technical standards, drive high-impact initiatives, and mentor engineers while partnering with leadership on priorities and execution risks. This role requires a strong development background, extensive experience in vulnerability management, and a deep understanding of security best practices.

• Lead the design and implementation of scalable triage, prioritization, and remediation-tracking systems across application, infrastructure, and hardware domains.
• Drive high-impact initiatives and mentor engineers through technical leadership, while partnering with leadership on priorities and execution risks.
• Act as senior technical responder for embargoed disclosures and zero-day events, coordinating with owner teams that deploy fixes.

• Excellent development background with strong coding skills in Python, Go, or similar languages for building scalable, production-grade security systems
• 9+ years of relevant experience with demonstrated strategic impact in vulnerability management, application security, platform security, or cloud security engineering
• Proven track record building and scaling security automation (SOAR workflows, AI/ML systems, detection pipelines) in production environments
• Demonstrated track record mentoring engineers across levels and driving cross-functional technical initiatives at organizational scale
• Deep subject matter expertise with vulnerability management best practices: CVSS, EPSS, CISA KEV, threat intelligence integration, and risk-based prioritization frameworks
• Significant experience with modern vulnerability management tooling (for example Wiz, Semgrep, Rapid7, Tenable, or equivalent)
• Strong business acumen and understanding of how security decisions impact engineering velocity, customer trust, and business outcomes
• Experience with specialized infrastructure: GPU/DPU environments, firmware security, hardware vulnerabilities, or high-performance computing
• Practical experience building AI/ML-powered security systems (LLM integration, automated decision-making, human-in-the-loop validation) in production
• Experience managing hardware vendor security partnerships (embargoed disclosures and pre-release collaboration)
• Production experience with security automation platforms such as TINES and serverless frameworks (AWS Lambda, GCP Cloud Functions)
• Strong DevOps, DevSecOps, or SRE background with deep experience in AWS/GCP/Azure cloud services and Infrastructure as Code (Terraform, CloudFormation)
• Deep understanding of Kubernetes security (container scanning, admission controllers, supply chain security, runtime protection)
• Experience leading security programs through rapid hypergrowth (10x+ infrastructure scaling) in startup or cloud-native environments
• Practical experience managing vulnerabilities within a FedRAMP-certified environment or similar regulatory frameworks