Note: The job is a remote job and is open to candidates in USA. CoreWeave is The Essential Cloud for AI™, providing a platform that enables innovators to build and scale AI with confidence. As an Offensive Security Engineer, you will lead efforts to identify and mitigate security risks, perform penetration testing, and provide guidance on secure design practices while contributing to the improvement of CoreWeave’s security posture.
Responsibilities
- Perform penetration testing as well as purple and red team exercises
- Conduct threat modeling, code reviews, and design reviews for development teams
- Research new attack techniques and develop strategies to counter them
- Develop and enforce security best practices and standards, maintaining internal compliance
- Provide solutions to complex security issues, manage multiple tasks, and prioritize effectively in a fast-paced environment
- Present technical security information to both technical and non-technical audiences
- Maintain technical documentation, reports, and security tooling with attention to detail
- Participate in other security-related initiatives as assigned
Skills
- 5+ years of experience in offensive information security roles
- Proficiency in at least one programming or scripting language (e.g., Go, Python, C/C++) for automation, code reviews, and tooling
- Bachelor's degree in Computer Science or related field
- Hands-on penetration testing experience and familiarity with offensive security tools
- Strong technical knowledge of Linux operating systems and containerized environments
- Experience securing Kubernetes and understanding related security practices
- Able to navigate ambiguity, identify root causes, and solve complex security problems
- Excellent written and verbal communication skills with strong technical documentation abilities
- Capable of working independently while managing multiple priorities in a fast-paced environment
- Strong desire to continuously learn and adopt new technologies and security techniques
- Experience with firmware reverse engineering, analyzing binaries, bootloaders, and embedded systems for vulnerabilities
- Relevant certifications such as Sec+, Net+, OSCP, or equivalent
- Experience with EDR tuning, detections-as-code, or threat hunting as part of a Blue Team
- Deep understanding of business-wide security best practices and implementation strategies
Benefits
- Discretionary bonus
- Equity awards
- Comprehensive benefits program (all based on eligibility)
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance
- Voluntary supplemental life insurance
- Short and long-term disability insurance
- Flexible Spending Account
- Health Savings Account
- Tuition Reimbursement
- Ability to Participate in Employee Stock Purchase Program (ESPP)
- Mental Wellness Benefits through Spring Health
- Family-Forming support provided by Carrot
- Paid Parental Leave
- Flexible, full-service childcare support with Kinside
- 401(k) with a generous employer match
- Flexible PTO
- Catered lunch each day in our office and data center locations
- A casual work environment
- A work culture focused on innovative disruption
- Hybrid work environment
- Remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets
- New hires will be invited to attend onboarding at one of our hubs within their first month
- Teams also gather quarterly to support collaboration
Company Overview