Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Security Engineer, Vulnerability Management role.

Rezi rewrites your resume against CoreWeave's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Security Engineer, Vulnerability Management posting at CoreWeave — free, in seconds.

About the Role

You will set technical direction for major areas of Vulnerability Management, identify gaps in our visibility, and lead the deployment and integration of security tooling to close them. You will design and build automation that brings together findings from multiple sources, including LLM-based workflows and agents for validation, risk assessment, and remediation guidance, and establish how we test and monitor their accuracy in production. You will lead complex investigations involving scanner findings, bug bounty reports, and new CVEs and disclosures, examining how weaknesses combine into attack paths and helping teams choose effective fixes. You will lead remediation efforts across engineering teams, resolve technical blockers, and improve the systems and processes that slow down vulnerability burndown. You will also participate in the vulnerability response on-call rotation, lead technical investigations and post-mortems for urgent vulnerability events, and mentor engineers through design reviews, code reviews, and hands-on problem solving.

Responsibilities

Set technical direction for major areas of Vulnerability Management.
Identify gaps in visibility and lead the deployment and integration of security tooling.
Design and build automation for findings aggregation, validation, risk assessment, and remediation guidance.
Establish methods for testing and monitoring automation accuracy in production.
Lead complex investigations of scanner findings, bug bounty reports, and new CVEs/disclosures.
Examine how weaknesses combine into attack paths and assist teams in selecting effective fixes.
Lead remediation efforts across engineering teams and resolve technical blockers.
Improve systems and processes to accelerate vulnerability burndown.
Participate in the vulnerability response on-call rotation.
Lead technical investigations and post-mortems for urgent vulnerability events.
Mentor engineers through design reviews, code reviews, and hands-on problem solving.

Requirements

Experience owning a significant technical area within vulnerability management or a related security engineering discipline.
Strong software development experience in Python, Go, Rust, or a similar language.
Experience designing, building, and maintaining production services, including automated testing, deployment, monitoring, and troubleshooting.
Ability to solve security problems with reliable, maintainable software.
Experience leading software design for systems that process security data and integrate multiple services.
Ability to make and explain architectural decisions about data models, APIs, performance, and failure handling.
Experience reviewing other engineers’ designs and code.
Ability to improve existing systems as requirements and scale change.
Hands-on experience building LLM-based workflows or agents for production use.
Experience evaluating accuracy, understanding limitations, investigating failure cases, and establishing where human review is needed for LLM workflows.
Strong understanding of Linux, containers, cloud, and Kubernetes.
Experience investigating vulnerabilities and weighing remediation options against operational constraints.
Experience assessing how exposure, exploitability, trust relationships, and existing controls affect vulnerability risk.
Ability to use analysis alongside CVSS, EPSS, and known exploitation to explain remediation priorities and drive technical decisions.
Experience leading technical work across engineering teams.
Experience collaborating with multiple stakeholders.
Experience resolving disagreements about implementation or remediation.
Experience improving systems that multiple teams depend on.
Experience mentoring engineers.
Experience establishing engineering practices that improve code quality, testing, and reliability across teams.
Must be a U.S. person (U.S. citizen or national, U.S. lawful permanent resident, refugee, or asylee) or eligible to access export controlled information without authorization, or eligible and likely to obtain the required export authorization.

Skills

Python
Go
Rust
LLM-based workflows
Linux
Containers
Cloud
Kubernetes
CVSS
EPSS
Wiz
Rapid7
CrowdStrike
Tines
Jira
Application security
Cloud security
Red team
Penetration testing
Blue team
Incident response
Asset inventory
Ownership mapping
External attack surface management
Automated remediation
Attack path analysis
Firmware vulnerabilities
Hardware vulnerabilities
GPU infrastructure
Server management interfaces
Reporting
Evidence collection

Location

US-based

Work Type

Full-time
Onsite

Experience Level

Senior

Salary/Compensations

$165,000 to $242,000

Benefits

Discretionary bonus
Equity awards
Medical, dental, and vision insurance (100% paid by CoreWeave)
Company-paid Life Insurance
Voluntary supplemental life insurance
Short and long-term disability insurance
Flexible Spending Account
Health Savings Account
Tuition Reimbursement
Employee Stock Purchase Program (ESPP)
Mental Wellness Benefits through Spring Health
Family-Forming support provided by Carrot
Paid Parental Leave
Flexible, full-service childcare support with Kinside
401(k) with a generous employer match
Flexible PTO
Catered lunch each day
Casual work environment
Work culture focused on innovative disruption

About the Company

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence.
Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability.
Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025.
We support and encourage an entrepreneurial outlook and independent thinking.
We foster an environment that encourages collaboration and provides the opportunity to develop innovative solutions to complex problems.
As we get set for takeoff, the growth opportunities within the organization are constantly expanding.
You will be surrounded by some of the best talent in the industry, who will want to learn from you, too.

Equal Opportunity

CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace.
All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.
CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship.