Staff Security Engineer, Vulnerability Management

📋 Description

• Define multi-quarter VM strategy, roadmap, and standards.
• Architect and scale AI-powered triage automation; design integration & rollout.
• Own end-to-end automation architecture from assessment to remediation orchestration.
• Own hardware vulnerability strategy for GPU/DPU firmware and BMC surfaces.
• Establish severity, remediation, and exception-handling standards; align IC3/IC4 with risk.

🎯 Requirements

• 9+ years in vulnerability management, security engineering, or cloud security.
• Proven track record building and scaling security automation (SOAR, AI/ML) in production.
• Deep expertise with vulnerability mgmt best practices: CVSS, EPSS, KEV, risk prioritization.
• Strong development background with Python, Go, or similar languages.
• Experience with modern tooling: Wiz, Semgrep, Rapid7, Tenable.
• Experience with GPU/DPU hardware security and firmware surfaces.

🎁 Benefits

• Medical, dental, and vision insurance – 100% paid by CoreWeave.
• 401(k) with generous employer match and ESPP.
• Flexible PTO and Paid Parental Leave.
• Health Savings Account and Flexible Spending Account options.
• Tuition Reimbursement and Mental Wellness benefits.
• Casual work environment and hybrid-friendly culture.