Senior Security Engineer, Infrastructure Security

CoreWeave is a specialized cloud provider, delivering a massive scale of GPU compute resources on top of the industry’s fastest and most flexible infrastructure. CoreWeave builds cloud solutions for compute intensive use cases — VFX and rendering, machine learning and AI, batch processing, and Pixel Streaming — that are up to 35 times faster and 80% less expensive than the large, generalized public clouds. Learn more at www.coreweave.com.

CoreWeave is looking for a curious and creative Security Engineer to join our Infrastructure Security team. The InfraSec team is responsible for the security posture and security tooling around our core Kubernetes infrastructure and provides security-focused solutions to the larger engineering organization. As a Senior Security Engineer, you will be responsible for overseeing and ensuring the efficiency of our kubernetes deployments. In this role, you’ll be part of a team developing new approaches to securing kubernetes at a never-before-seen scale and complexity.

Responsibilities:

• Maintain security tooling including just-in-time access systems and zero-trust infrastructure
• Develop reference security frameworks to support standardized approaches to security challenges
• Work cross-functionally to maintain and evolve authorization frameworks to support evolving business needs
• Build and maintain core security tooling documentation for internal self-service use and reference
• Participate in engineering design discussions from a security perspective
• Participate in a rotating on call rotation 

Qualifications & Experience:

• 3+ years working with Kubernetes and, more specifically, securing it
• 5+ years working with Linux
• Proficient in Go and/or Python (you can write software in one of these languages)
• Demonstrated experience working with and developing containerized applications
• Demonstrated experience contributing to technical and procedural documentation and policies
• Experience with CI/CD tools and approaches
• Experience with Infrastructure-as-Code software and tooling

Nice to Have:

• Experience with remote-access products such as Teleport
• Understanding of SSO protocols, specifically OIDC and SAML
• Experience leveraging PKI and mTLS

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $145,000-$175,000. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience.

Hybrid Workplace

Successful candidates will be expected to attend onboarding training at our NJ Headquarters within their first several weeks of employment, with subsequent quarterly travel requirements of 1 week …