Apply on Employer Site

CoreWeave · 1 day ago

Director, Security Engineering, Detection and Response

Sunnyvale, CA

Full-time

Hybrid

Director/Executive

$206K/yr - $303K/yr

10+ years exp

CoreWeave is a specialized cloud provider focused on AI technologies. They are seeking a Director of Detection and Response Engineering to lead security detection, incident response, and offensive security teams, ensuring a proactive security culture and effective threat mitigation strategies.

AI InfrastructureArtificial Intelligence (AI)Cloud ComputingCloud InfrastructureInformation TechnologyMachine Learning

No H1B

U.S. Citizen Only

Responsibilities

Designing, building, and tuning detection systems to rapidly identify malicious activity and anomalies

Leading CoreWeave’s incident management program, ensuring swift, coordinated, and effective responses to security events

Overseeing red team and penetration testing operations to proactively identify and remediate vulnerabilities before they can be exploited

Build, manage, and optimize advanced detection capabilities across cloud, infrastructure, and endpoint environments

Develop automation and orchestration for alert triage, investigation, and containment

Continuously refine detections using threat intelligence, behavioral analytics, and adversary emulation

Establish and maintain CoreWeave’s incident response playbooks, escalation processes, and tooling

Lead high-severity incident investigations, coordinating with technical and executive stakeholders

Conduct thorough post-incident reviews and ensure timely remediation of findings

Direct the offensive security program, including red teaming, penetration testing, and adversary simulation

Develop scenarios that emulate real-world threats to validate defenses

Partner with product and engineering teams to remediate vulnerabilities and improve security-by-design

Build and mentor a high-performing team of security engineers and analysts

Define security KPIs, metrics, and reporting to measure effectiveness and inform leadership

Partner with CISO and other executives to align security priorities with business goals

Qualification

Detection & Response EngineeringIncident ResponseOffensive SecuritySIEM/SOAR platformsCloud-native security toolsThreat intelligenceBehavioral analyticsAdversary emulationCommunicationTeam leadershipCross-functional collaboration

Required

10+ years in cybersecurity, with 5+ years in a senior leadership role

Proven track record in Detection & Response Engineering, Incident Response, and Offensive Security in cloud-native or large-scale infrastructure environments

Strong expertise in SIEM/SOAR platforms, endpoint detection, and cloud-native security tools

Deep understanding of adversary TTPs, MITRE ATT&CK framework, and threat hunting methodologies

Experience leading cross-functional security programs in high-growth, fast-paced environments

Excellent communication skills with the ability to influence technical and non-technical stakeholders