Skip to content
NEXTMOVEFDE careers · United States
Weights & Biases

Senior Security Engineer II, Vulnerability Management

AI summary of the role

Build and lead the Vulnerability Management program for CoreWeave's AI infrastructure, architecting intelligent automation to defend GPU clusters.

What you’ll do

  • Build and scale AI-powered triage workflows using LLM integration and TINES orchestration
  • Drive intelligent, risk-based vulnerability prioritization and train AI models on assessments
  • Design and implement automated detection-to-ticket pipelines that generate, test, and scale vulnerability detections
  • Execute remediation campaigns for EOL product removal, vulnerable software upgrades, and OS migrations at scale

What you’ll bring

  • 7+ years experience in vulnerability management, application security, platform security, or cloud security engineering
  • Proven hands-on experience building security automation (SOAR workflows, detection pipelines, or vulnerability prioritization frameworks)
  • Deep expertise with vulnerability management best practices: CVSS, EPSS, CISA KEV, exploit intelligence, and compensating controls
  • Strong development background with proficiency in Python, Go, or similar languages

Technologies

Python · Go · Wiz · Semgrep · Rapid7 · TINES · Splunk SOAR · AWS Lambda · Terraform · Kubernetes

Source and classification

Internal deployment & tooling · Evidence for this classification:

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com. What You’ll Do: We are seeking a Senior Security Engineer to build the Vulnerability Management program protecting CoreWeave's AI infrastructure. You will architect intelligent automation systems that defend the GPU clusters powering breakthrough AI research and enterprise AI applications. You'll solve security problems at the intersection of cloud-scale
More from the job description

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com. What You’ll Do: We are seeking a Senior Security Engineer to build the Vulnerability Management program protecting CoreWeave's AI infrastructure. You will architect intelligent automation systems that defend the GPU clusters powering breakthrough AI research and enterprise AI applications. You'll solve security problems at the intersection of cloud-scale infrastructure and specialized hardware—from GPU firmware vulnerabilities to AI-powered threat detection. This role combines technical depth, strategic thinking, and the autonomy to design workflows that will protect infrastructure driving the future of AI. About the role: Build and scale AI-powered triage workflows: evaluate tools (LLM integration, TINES orchestration), architect solutions, and deploy to production Drive intelligent, risk-based vulnerability prioritization while simultaneously trainin [... source excerpt omitted ...] t practices: CVSS, EPSS, CISA KEV, exploit intelligence, and compensating controls Strong development background with proficiency in Python, Go, or similar languages for building production-grade security tools Experience with modern vulnerability management tooling such as Wiz, Semgrep, Rapid7, or similar platforms Demonstrated ability to partner with cross-functional teams (IT, SRE, Engineering) to drive remediation without formal authority Strong familiarity with common security vulnerabilities and the ability to judge their severity and business impact Preferred: Practical experience building AI/ML-powered security workflows (LLM integration, automated triage, human-in-th [... source excerpt omitted ...] orm, CloudFormation) Deep understanding of container security and Kubernetes (image scanning, admission control, runtime protection, supply chain security) Experience supporting customer audits (SOC 2, ISO 27001, FedRAMP) with vulnerability evidence and control validation Experience integrating vulnerability management into modern CI/CD pipelines with a "shift-left" mentality Wondering if you’re a good fit? We believe in investing in our people and value candidates who can bring their diverse experiences to our teams – even if you aren't a 100% skill or experience match. Here are a few qualities we’ve found compatible with our team. If some of this describes you, we’d love to

How jobs are selected

Employer postings · Data from · Sources