Application Security Engineer

Join to apply for the Application Security Engineer role at Core Weave
.

Core Weave is the AI Hyperscaler, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, Core Weave has operated a growing footprint of data centers covering every region of the US and across Europe. Core Weave was ranked as one of the TIME
100 most influential companies of 2024.

As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you’re someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, Core Weave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry.

• You'll unravel and tackle application security challenges at an exhilarating scale.
• You'll collaborate with exceptional engineers developing cutting-edge applications and platforms
• You'll enjoy the freedom and support to experiment, innovate, and significantly shape our approach to securing applications

• Conduct architecture reviews, security assessments, and code reviews to proactively identify and fix vulnerabilities in our applications
• Developing robust, repeatable frameworks for application security that make it easy for teams to build securely from day one
• Collaborating closely with development teams to integrate security seamlessly into their CI/CD pipelines
• Crafting clear, practical security guidance and documentation that empowers developers
• Actively participating in architectural discussions and providing insightful security recommendations
• Occasionally, drawing the owl – figuring out innovative solutions while navigating ambiguous situations

• Minimum Qualifications:
  
  At least 3 years of experience directly focused on securing the software lifecycle
• Strong skills in application architecture, secure coding reviews, and threat modeling
• Solid experience developing secure applications or security tooling in Go, Python, or similar modern languages
• Proven experience collaborating with developers to implement secure coding practices
• Excellent ability to negotiate and reach consensus with developers and fellow security practitioners, as well as excellent documentation skills
• Familiarity with modern development environments, containers, microservices, and CI/CD pipelines

• Hands-on experience with Kubernetes security, especially as it relates to being a YAML engineer
• Familiarity with SAST/DAST and other automated application security testing tools
• Deep understanding of cloud-native security challenges and solutions

The base salary range for this role is $165,000 to $275,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility).

In addition to a competitive salary, we offer a variety of benefits to support your needs, including:

• Medical, dental, and vision insurance - 100% paid for by Core Weave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption

While we prioritize a hybrid work environment,…