CoreWeave
Director, Product Security
$227K–$303K
Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA +4 · Director · Full-time · Posted Oct 20, 2026
- Location
- Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA
Bellevue, WA
Livingston, New Jersey, United States
Manhattan, New York, United States
Sunnyvale, California, United States - Experience
- 10+ years in security or software engineering; 5+ years of security leadership experience.
- Visa sponsorship
- Requires access to export-controlled information: applicants must be a U.S. person, eligible to access without required export authorization, or eligible and reasonably likely to obtain required U.S. government authorization. CoreWeave may decline to pursue export licensing for legitimate business reasons.
About the job
Leads CoreWeave’s Product Security organization and strategy, building agentic security capabilities and programs across its cloud infrastructure, products, and AI systems.
What you'll do
- Set the Product Security strategy and lead teams covering application security, vulnerability management, offensive security, AI product security, and vulnerability response.
- Build scalable agentic vulnerability discovery, triage, testing, and remediation programs, and oversee vulnerability management through executive reporting.
- Establish secure development practices and paved-road tools; lead product vulnerability response and partner with product, engineering, and security teams.
What they ask for
- 10+ years in security or software engineering, with significant time in application security, vulnerability management, or offensive security.
- 5+ years of security leadership, including managing managers and scaling a multi-team organization.
- Track record building or running product security at a cloud provider, security company, or large-scale SaaS business.
- Hands-on application security depth; experience operating vulnerability management at scale and direct offensive security experience.
Nice to have
- Experience deploying AI agents or LLM-based security tooling, or building the platform they run on.
- Experience running a PSIRT or coordinated vulnerability disclosure function.
Pay
$227,000 to $303,000 USD (base salary)
Tools
Kubernetes, CI/CD, LLMs, AI agents, shared GPUs, bare metal
AI focus
Build agentic-first security programs, including agents for vulnerability discovery, triage, and remediation; secure AI products, models, datasets, agent tooling, inference systems, and AI-generated code; test AI systems against threats such as prompt injection and poisoned tools.
Model-written summary · the original posting is authoritative