About this role
Protecting cloud infrastructure and specialized AI workloads requires deep analytical capability to mitigate complex security threats. CoreWeave operates a cloud platform built for AI innovators, and this role addresses the need for robust incident management and threat containment across distributed environments.
As a Senior Security Operations Engineer, the incoming professional will independently lead investigations into sophisticated security events and serve as a technical escalation resource. The team focuses on refining detection mechanisms, automating workflows, and securing Linux, macOS, cloud, and Kubernetes systems.
Candidates who thrive in this environment possess strong forensic instincts and excel at making sound decisions under pressure. A background in security operations combined with mentorship skills will enable the right person to elevate the scalability and effectiveness of the security program.
What you will do
- Participate in a 24/7/365 security operations center, which includes rotating on-call coverage for overnights and weekends.
- Investigate and respond independently to complex security events across Linux, macOS, cloud, and Kubernetes environments.
- Determine the scope, severity, and proper escalation paths for potential security incidents.
- Coordinate containment and remediation efforts alongside security, engineering, infrastructure, and operations groups.
- Utilize SIEM and EDR platforms to spot suspicious activity and develop actionable findings.
- Build and improve detections-as-code, investigation procedures, automation scripts, runbooks, and response workflows.
- Mentor junior engineers and serve as an escalation point during active investigations.
- Lead operational and technical improvement projects that scale security operations.
What you need
- Bring three to five or more years of professional experience in security operations, incident response, digital forensics, or detection engineering.
- Demonstrate strong working knowledge of Linux and macOS systems, including internals, logging, and forensic artifacts.
- Possess experience investigating Kubernetes or container-based security events.
- Show proficiency with modern security tooling such as SIEM, EDR, IDS/IPS, and firewalls.
- Understand network protocols, VPNs, proxies, and identity systems thoroughly.
- Hold a degree in Computer Science, Computer Engineering, Cyber Security, Information Technology, or equivalent practical experience.
Nice to have
- Experience securing cloud infrastructure or large-scale production environments
- Experience using Python or another scripting language to automate security workflows
- Familiarity with incident response in Kubernetes-based infrastructure
- Experience collaborating with detection engineering or threat intelligence teams
Benefits
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance and voluntary supplemental life insurance
- Short and long-term disability insurance, Flexible Spending Account, and Health Savings Account
- Tuition Reimbursement and Employee Stock Purchase Program participation
- Paid Parental Leave, flexible childcare support, and mental wellness benefits
- 401(k) with a generous employer match and Flexible PTO
Skills and tech stack
Questions candidates ask
What is the compensation range for this role?
The base salary range for this role is $134,000 to $179,000. The starting salary is determined based on job-related knowledge, skills, experience, and market location.
What are the on-call and schedule requirements?
The position requires participation in a 24/7/365 SOC, including rotating on-call coverage for overnights and weekends.
What benefits are included for US-based employees?
The total rewards package includes a discretionary bonus, equity awards, 100% employer-paid medical, dental, and vision insurance, a 401(k) with an employer match, and flexible PTO.