Apply on Employer Site

CoreWeave · 3 days ago

Staff Security Engineer, Network Security

Bellevue, WA

Full-time

Hybrid

Senior Level, Lead/Staff

$188K/yr - $275K/yr

7+ years exp

CoreWeave is The Essential Cloud for AI™, delivering technology and tools that empower innovators in AI. The Staff Security Engineer will architect defenses for the company's global network and GPU clusters, focusing on proactive security measures and collaboration with network engineering teams.

Artificial Intelligence (AI)Cloud ComputingCloud InfrastructureInformation TechnologyMachine Learning

No H1B

U.S. Citizen Only

Responsibilities

Unravel and tackle network security challenges at an exhilarating global scale

Collaborate with exceptional network architects and engineers building the backbone infrastructure for the AI revolution

Enjoy the freedom and support to experiment, innovate, and significantly shape our approach to securing the underlay and overlay of our cloud

Conducting architecture reviews, protocol analysis, and design assessments to proactively identify and fix vulnerabilities in our backbone and data center fabrics

Developing robust, repeatable frameworks for network security automation (CoPP, ACL generation, Route Filtering) that make it easy for teams to build securely from day one

Collaborating closely with Network Engineering teams to integrate security checks and validation seamlessly into their CI/CD and config-push pipelines

Crafting clear, practical security guidance and documentation that empowers engineers to deploy secure routing policies and topologies

Actively participating in architectural discussions regarding peering, transit, and traffic engineering, providing insightful security recommendations

Occasionally, 'drawing the owl' - figuring out innovative solutions for securing massive throughput environments while navigating ambiguous situations

Qualification

Network EngineeringInfrastructure SecurityNetwork AutomationCore Network ProtocolsLinux Networking InternalsSecurity ToolingMulti-vendor EnvironmentsTechnical DocumentationCollaboration SkillsNegotiation SkillsProblem Solving

Required

7+ years of experience directly focused on Network Engineering, Infrastructure Security, or ISP/Backbone operations

Strong skills in core network protocols (BGP, OSPF/IS-IS, TCP/IP) and deep knowledge of how they function at the packet level

Solid experience developing network automation or security tooling in Go, Python, or similar modern languages

Proven experience collaborating with network architects to implement secure designs in multi-vendor environments (Arista EOS, SONiC, Juniper, etc.)

Excellent ability to negotiate and reach consensus with engineers and fellow security practitioners, as well as excellent technical documentation skills

Familiarity with Linux networking internals, control plane protection, and managing infrastructure as code

Preferred

Hands-on experience with hyperscale network architectures (CLOS fabrics, MPLS/EVPN, VXLAN) and the unique security challenges of high-performance computing

Familiarity with hardware-level networking security (SmartNICs/DPUs, connectX) and flow-based telemetry analysis

Deep understanding of internet routing security standards (RPKI, MANRS) and advanced DDoS mitigation strategies at the network layer

Hands-on experience with Infiniband and RoCE