CoreWeave
Senior Security Engineer, Vulnerability Management
$139K–$204K
Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA +5 · Senior · Full-time · Posted Feb 10, 2026
- Location
- Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA
Bellevue, WA
Livingston, New Jersey, United States
Manhattan, New York, United States
San Francisco, California, United States
Sunnyvale, California, United States - Experience
- 5+ years of relevant experience.
- Visa sponsorship
- Applicants must meet one of the stated export-control access conditions: be a U.S. person, be eligible to access the information without export authorization, or be eligible and reasonably likely to obtain the required authorization. CoreWeave may decline to pursue export licensing.
About the job
Own and improve vulnerability-management systems and workflows across application, infrastructure, and hardware domains, including triage automation, prioritization, remediation tracking, and incident response.
What you'll do
- Build and maintain automation and workflow components for vulnerability assessment, detection, ticket routing, and remediation tracking.
- Triage hardware-adjacent vulnerabilities and support responses to embargoed disclosures and zero-day events.
- Develop prioritization logic, risk metrics, and technical improvements; collaborate with stakeholders to accelerate remediation.
What they ask for
- 5+ years of relevant experience in vulnerability management, application security, platform security, or cloud security engineering.
- Production experience building security automation, such as SOAR workflows, AI/ML systems, or detection pipelines.
- Knowledge of CVSS, EPSS, CISA KEV, threat intelligence integration, and risk-based prioritization.
- Strong coding skills in Python, Go, or similar languages, and hands-on experience with vulnerability-management tooling.
Nice to have
- Familiarity with GPU/DPU environments, firmware security, hardware vulnerabilities, or high-performance computing.
- Experience with AI/ML-powered security systems, hardware-vendor security work, TINES, serverless frameworks, cloud services, Infrastructure as Code, Kubernetes security, or regulated environments.
Pay
$139,000 - 204,000 USD base salary
Tools
CVSS, EPSS, CISA KEV, Python, Go, Wiz, Semgrep, Rapid7
AI focus
Build security automation that may include AI/ML systems; preferred experience includes LLM integration, automated decision-making, and human-in-the-loop validation.
Model-written summary · the original posting is authoritative