Senior Security Engineer, Vulnerability Management

Core Weave is The Essential Cloud for AI. Built for pioneers by pioneers, Core Weave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, Core Weave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability.

Founded in 2017, Core Weave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at .

What You’ll Do:

We are seeking a Senior Security Engineer to own key technical work in Core Weave’s Vulnerability Management program. You will build and improve triage, prioritization, and remediation-tracking systems across application, infrastructure, and hardware domains. You will deliver well-scoped projects, contribute to technical standards, and work closely with senior engineers and stakeholders to drive execution.

About the role:

Own VM technical projects end to end and contribute to architecture decisions for your areas of the program

Build and maintain triage automation, including integrations, decision logic, and production hardening

Implement workflow components from assessment and detection to ticket routing and remediation tracking

Investigate and triage hardware-adjacent vulnerabilities (GPU firmware, DPU firmware/Blue Field, and BMC surfaces) alongside senior engineers

Support response to embargoed disclosures and zero-day events, working with owner teams that deploy fixes

Contribute to prioritization logic, severity models, and exception workflows through code, design reviews, and technical proposals

Build technical metrics and risk reporting that inform program and leadership decisions

Take part in root-cause analysis for vulnerability incidents and implement technical improvements

Share knowledge through code reviews and documentation, and help onboard new teammates

Partner with security, engineering, and operational stakeholders to improve workflow reliability and speed up remediation

Who You Are :5+ years of relevant experience in vulnerability management, application security, platform security, or cloud security engineering

Experience building security automation (SOAR workflows, AI/ML systems, detection pipelines) in production environments

Solid working knowledge of vulnerability management best practices: CVSS, EPSS, CISA KEV, threat intelligence integration, and risk-based prioritization frameworks

Strong development background, with coding skills in Python, Go, or similar languages for building production-grade security systems

Hands-on experience with modern vulnerability management tooling (for example Wiz, Semgrep, Rapid7, Tenable, or equivalent)
Familiarity with specialized infrastructure (GPU/DPU environments, firmware security, hardware vulnerabilities, or high-performance computing) is a plus Track record of collaborating across teams to deliver technical projects

Understanding of how security decisions affect engineering velocity, customer trust, and business outcomes

Preferred:

Experience building AI/ML-powered security systems (LLM integration, automated decision-making, human-in-the-loop validation)
Exposure to hardware vendor security work (embargoed disclosures and pre-release collaboration)

Experience with security automation platforms such as TINES and serverless frameworks (AWS Lambda, GCP Cloud Functions)
Dev Ops, Dev Sec Ops , or SRE background with experience in AWS/GCP/Azure cloud services and Infrastructure as Code (Terraform, Cloud Formation)
Working knowledge of Kubernetes security (container scanning, admission controllers, supply chain security, runtime protection)
Experience working in fast-growing startup or cloud-native environments

Experience…