Senior Security Engineer, Detection Engineer
Overview:
In this role, you will design and implement advanced threat detection at scale to safeguard CoreWeave's AI-focused platform. You will work with cross-functional teams to enhance visibility, respond to incidents, and stay ahead of evolving threats. The position offers autonomy to innovate within a security-centric, fast-paced environment and a chance to shape CoreWeave's security posture. You will contribute to strategic security initiatives and defender-focused architecture. Compensation / Benefits Medical, dental, and vision insurance - 100% paid Company-paid Life Insurance 401(k) with a generous employer match Flexible PTOTuition Reimbursement Employee Stock Purchase Program (ESPP)
Responsibilities:
- Develop and implement advanced threat detection capabilities to proactively identify and mitigate cyber threats
- Create precise, efficient custom detection logic tailored to changing threat landscapes
- Lead and/or participate in real-time security incident response, containment, and remediation
- Conduct proactive threat-hunting to uncover hidden vulnerabilities
- Collaborate with cross-functional teams to improve security visibility and detection effectiveness
- Continuously research emerging threats, attack vectors, and detection methodologies
- Contribute to security architecture and controls through strategic security initiatives
- Engage in security assessments to uphold high security and compliance standards
- Solve problems creatively in ambiguous situations
Key requirements:
- Proven ability to deliver impactful projects across multiple technical domains and teams
- Extensive experience crafting custom alert logic in tools like KQL and SQLFamiliarity with Kubernetes fundamentals
- Experience working with Purple and Red Teams to enhance detection
- Solid understanding of MITRE ATT&CK and Cyber Kill Chain
- Proficiency in at least one query language (SQL, Splunk QL, HiveQL)
- Competency in writing detections in Python, Bash, Go, JavaScriptStrong foundation in Linux/macOS internals and event sources (eBPF, Endpoint Security Framework)
- Practical experience with Incident Response Lifecycle methodology
- Collaborative mindset
- Proactive and autonomous
- Adaptability in fast-changing environmentsKQLSQLKubernetes