Detection & Response Engineering - Security Engineer
Listed on 2025-12-01
-
IT/Tech
Cybersecurity, Systems Engineer, Security Manager, Network Security
Join to apply for the Detection & Response Engineering - Security Engineer role at Core Weave
Detection & Response Engineering - Security Engineer1 day ago Be among the first 25 applicants
Join to apply for the Detection & Response Engineering - Security Engineer role at Core Weave
Get AI-powered advice on this job and more exclusive features.
Core Weave is the AI Hyperscaler, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, Core Weave has operated a growing footprint of data centers covering every region of the US and across Europe. Core Weave was ranked as one of the TIME
100 most influential companies of 2024.
As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you’re someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, Core Weave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry.
Core Weave powers the creation and delivery of the intelligence that drives innovation.
What You’ll Do
On this team, you will:
- Design cutting-edge detection strategies at scales most security engineers only dream about
- Collaborate with talented peers in an innovative environment focused on excellence
- Enjoy the autonomy and encouragement to innovate and influence Core Weave’s security landscape directly
- Developing and implementing advanced threat detection capabilities to proactively identify and mitigate cyber threats
- Crafting precise and efficient custom detection logic tailored to evolving threat landscapes
- Leading and/or participating in real-time security incident response, threat containment, and remediation.
- Conducting proactive threat-hunting exercises to uncover hidden vulnerabilities and anticipate threats
- Collaborating closely with cross-functional teams to enhance security visibility and detection effectiveness
- Continuously researching and staying informed about emerging threats, attack vectors, and detection methodologies
- Participating in strategic security initiatives, contributing your expertise to security architecture and controls
- Engaging in security assessments to uphold our high standards for security and compliance
- Occasionally, "drawing the owl" - figuring out innovative solutions while navigating ambiguous situations
Who You Are
Minimum Qualifications
- Proven ability to deliver impactful projects spanning multiple technical domains and teams
- Extensive experience crafting custom alert logic within industry-standard tooling, like KQL, SQL, etc
- Familiarity with Kubernetes fundamentals and enthusiasm to deepen your expertise.
- Experience collaborating closely with Purple and Red Teams, leveraging findings to enhance detection capabilities.
- Solid understanding of modern TTP frameworks such as MITRE ATT&CK and Cyber Kill Chain.
- Proficiency in at least one query language (e.g., SQL, Splunk Query Language, HiveQL).
- Competency in writing detections in multiple languages (Python, Bash, Go, JavaScript, etc.)
- Strong foundational knowledge of Linux or macOS internals and their relevant event sources (eBPF, Endpoint Security Framework)
- Practical experience applying and contributing to the Incident Response Lifecycle methodology
Preferred Qualifications
- Deep understanding of Kubernetes-specific detection and security challenges
- Contributions to the open-source security community or experience developing detection tooling
- Experience leveraging advanced analytics or machine…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).