Senior Security Engineer, Detection Engineer

Role description

Role Overview

The role involves designing cutting-edge detection strategies, collaborating with peers, and enjoying autonomy to innovate and influence CoreWeave's security landscape. The team works in an innovative environment focused on excellence, with a strong emphasis on security and compliance. The role requires a solid understanding of modern TTP frameworks, proficiency in query languages, and experience in writing detections in multiple languages.

What You Will Do

Responsibilities include developing and implementing advanced threat detection capabilities, crafting precise and efficient custom detection logic, leading and participating in real-time security incident response, and conducting proactive threat-hunting exercises. The role also involves collaborating closely with cross-functional teams to enhance security visibility and detection effectiveness.

Why It Might Be a Fit

The ideal candidate will have a proven ability to deliver impactful projects, extensive experience in crafting custom alert logic, and a solid understanding of modern TTP frameworks. The role requires a strong foundational knowledge of Linux or macOS internals, practical experience in applying and contributing to the Incident Response Lifecycle methodology, and proficiency in writing detections in multiple languages.

Requirements

• Proven ability to deliver impactful projects spanning multiple technical domains and teams
• Extensive experience crafting custom alert logic within industry-standard tooling
• Familiarity with Kubernetes fundamentals
• Experience collaborating closely with Purple and Red Teams
• Solid understanding of modern TTP frameworks such as MITRE ATT&CK and Cyber Kill Chain
• Proficiency in at least one query language (e.g., SQL, Splunk Query Language, HiveQL)
• Competency in writing detections in multiple languages (Python, Bash, Go, JavaScript, etc.)
• Strong foundational knowledge of Linux or macOS internals and their relevant event sources (eBPF, Endpoint Security Framework)
• Practical experience applying and contributing to the Incident Response Lifecycle methodology

Benefits

• Medical, dental, and vision insurance
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption