Senior Manager, Security Engineering, Incident Response

Senior Manager, Security Engineering, Incident Response

Join to apply for the Senior Manager, Security Engineering, Incident Response role at Core Weave
.

Core Weave is The Essential Cloud for AI™. Built for pioneers by pioneers, Core Weave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, Core Weave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, Core Weave became a publicly traded company (Nasdaq: CRWV) in March 2025.

Learn more at

Core Weave is seeking a Senior Manager, Security Engineering, Incident Response to lead and mature our global incident response and cyber defense capabilities. In this role, you will be responsible for developing, managing, and scaling Core Weave’s ability to detect, contain, and remediate security incidents across a rapidly growing cloud infrastructure environment. This position is highly visible and mission‑critical. The successful candidate will work closely with the Chief Information Security Officer (CISO), senior leadership, and cross‑functional technology teams to ensure Core Weave maintains a resilient, proactive, and best‑in‑class incident response program that protects our customers, infrastructure, and data.

• Incident Response Leadership – Lead Core Weave’s global incident response program, ensuring timely detection, analysis, containment, eradication, and recovery from security incidents.
• Incident Command – Serve as the incident commander during major security events, providing leadership, decision‑making, and executive‑level communication.
• Playbooks & Processes – Develop and maintain playbooks, processes, and escalation paths to streamline response efforts.
• Program Development & Maturity – Build, mentor, and lead a high‑performing incident response team, including analysts, investigators, and engineers.
• KPIs & Reporting – Define and implement KPIs, reporting, and dashboards to measure incident response effectiveness.
• Process Evolution – Continuously assess and evolve IR processes in line with emerging threats, regulatory requirements, and industry best practices.
• Cross‑Functional Collaboration – Partner with Detection Engineering, Threat Intelligence, Cloud Infrastructure, and Product Security teams to improve detection and prevention capabilities.
• Regulatory & Customer‑Facing Coordination – Work closely with Legal, Compliance, and Communications teams to manage regulatory and customer‑facing requirements during incidents.
• Readiness & Exercises – Support tabletop exercises, executive simulations, and business continuity planning to strengthen organizational readiness.
• Threat Awareness & Prevention – Monitor the evolving threat landscape to ensure the organization is prepared for new and emerging attack techniques.
• Advanced Response Automation – Drive adoption of advanced response automation, threat‑hunting initiatives, and intelligence‑driven defense strategies.

• Experience:
  
  8–12+ years in cybersecurity with at least 4–5 years of direct experience in incident response leadership roles within large‑scale or cloud environments.
• Technical Expertise:
  Strong knowledge of intrusion detection, malware analysis, digital forensics, cloud security (Kubernetes, containers, and distributed systems a plus).
• Frameworks:
  Familiarity with security frameworks such as NIST 800‑61, MITRE ATT&CK, ISO 27001, and SOC 2.
• Leadership:
  Proven ability to lead global, cross‑functional response teams during high‑pressure security incidents.
• Communication:
  Skilled in executive and technical communications, with the ability to brief senior leaders and stakeholders effectively.
• Certifications (preferred): GIAC (GCIH, GCIA, GCFA), CISSP, CISM, or equivalent.

We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match.

At Core Weave, security is at the core of everything we do.…