CoreWeave
Senior Security Engineer, Vulnerability Management
$165K–$242K
Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA +4 · Senior · Full-time · Posted Oct 9, 2026
- Location
- Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA
Bellevue, WA
Livingston, New Jersey, United States
Manhattan, New York, United States
Sunnyvale, California, United States - Experience
- 7+ years in security engineering, software engineering, or a related technical role.
- Visa sponsorship
- Applicants must be a U.S. person, eligible to access export-controlled information without export authorization, or eligible and reasonably likely to obtain the required U.S. government export authorization. CoreWeave may decline to pursue export licensing for legitimate business reasons.
About the job
Leads vulnerability management engineering by building security tooling and automation, assessing risk, and coordinating fixes across engineering teams.
What you'll do
- Set technical direction for vulnerability management tooling, integrations, and automated workflows, including monitoring LLM accuracy in production.
- Investigate vulnerability findings and attack paths, prioritize risk, and lead remediation across engineering teams.
- Participate in vulnerability response on-call, lead urgent investigations and post-mortems, and mentor engineers.
What they ask for
- Experience owning a technical area in vulnerability management or a related security engineering discipline.
- Strong production software development experience in Python, Go, Rust, or a similar language.
- Hands-on experience building and evaluating production LLM-based workflows or agents.
- Experience assessing vulnerability risk and leading technical work across engineering teams.
Nice to have
- Experience with Wiz, Rapid7, CrowdStrike, Tines, or Jira.
- Experience improving bug bounty or vulnerability disclosure programs.
Pay
USD $165,000 to $242,000 base salary
Tools
Python, Go, Rust, Linux, containers, cloud, Kubernetes, LLM
AI focus
Build production LLM-based workflows and agents for vulnerability validation, risk assessment, and remediation guidance; evaluate accuracy, investigate failures, monitor performance, and determine when human review is needed.
Model-written summary · the original posting is authoritative