Director, Security Engineering, Detection and Response

Director, Security Engineering, Detection and Response

Join to apply for the Director, Security Engineering, Detection and Response role at Core Weave
. Core Weave is The Essential Cloud for AI™, specializing in high‑performance compute for AI workloads, and is known for its focus on infrastructure excellence and security.

The senior leader will design and execute strategies to identify, contain, and mitigate threats while proactively testing and hardening our defenses across the entire cloud platform. The role owns the strategy, architecture, and execution for the following areas:

• Detection & Response Engineering – Designing, building, and tuning detection systems to rapidly identify malicious activity and anomalies.
• Incident Response (IR) – Leading Core Weave’s incident management program, ensuring swift, coordinated, and effective responses to security events.
• Offensive Security – Overseeing red team and penetration testing operations to proactively identify and remediate vulnerabilities before they can be exploited.

You will lead a highly skilled technical team, collaborate with senior leadership across engineering, operations, and compliance, and drive a proactive, intelligence‑driven security culture.

• Build, manage, and optimize advanced detection capabilities across cloud, infrastructure, and endpoint environments.
• Develop automation and orchestration for alert triage, investigation, and containment.
• Continuously refine detections using threat intelligence, behavioral analytics, and adversary emulation.

• Establish and maintain Core Weave’s incident response playbooks, escalation processes, and tooling.
• Lead high‑severity incident investigations, coordinating with technical and executive stakeholders.
• Conduct thorough post‑incident reviews and ensure timely remediation of findings.

• Direct the offensive security program, including red teaming, penetration testing, and adversary simulation.
• Develop scenarios that emulate real‑world threats to validate defenses.
• Partner with product and engineering teams to remediate vulnerabilities and improve security‑by‑design.

• Build and mentor a high‑performing team of security engineers and analysts.
• Define security KPIs, metrics, and reporting to measure effectiveness and inform leadership.
• Partner with CISO and other executives to align security priorities with business goals.

• 10+ years in cybersecurity, with 5+ years in a senior leadership role.
• Proven track record in Detection & Response Engineering, Incident Response, and Offensive Security in cloud‑native or large‑scale infrastructure environments.
• Strong expertise in SIEM/SOAR platforms, endpoint detection, and cloud‑native security tools.
• Deep understanding of adversary TTPs, MITRE ATT&CK framework, and threat‑hunting methodologies.
• Experience leading cross‑functional security programs in high‑growth, fast‑paced environments.
• Excellent communication skills with the ability to influence technical and non‑technical stakeholders.

• Experience in GPU cloud, HPC, or large‑scale distributed computing environments.

At Core Weave, we work hard, have fun, and move fast. We value curiosity, ownership, empowerment, client experience, and collaboration. Our culture encourages entrepreneurial thinking, independent ideas, and innovation.

The base salary range for this role is $206,000 to $303,000
.

• Medical, dental, and vision insurance – 100% paid by Core Weave
• Company‑paid Life Insurance
• Voluntary supplemental life insurance
• Short‑ and long‑term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family‑forming support provided by Carrot
• Paid Parental Leave
• Flexible, full‑service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in office and data center locations
• A casual work environment focused on innovative disruption

We prioritize a hybrid work environment. Remote work may be considered for…