Director, Product Security at CoreWeave | Bellevue, WA, US | Rezi

Director, Product Security at CoreWeave

Director, Product Security

CoreWeave · Bellevue, WA, US

2 weeks ago

Director, Product Security

CoreWeave · Bellevue, WA, US

18 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Director, Product Security role.

Rezi rewrites your resume against CoreWeave's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Director, Product Security posting at CoreWeave — free, in seconds.

About the Role

CoreWeave is seeking a Director of Product Security to lead the Product Security team. This is a highly technical leadership role focused on building security that runs at machine speed, with an agentic-first approach. The role involves owning the strategy and roadmap for product security, leading managers and senior engineers, and building new capabilities. Security is a key differentiator for CoreWeave, and this role is crucial in earning customer trust.

Responsibilities

  • Define and drive the strategy and roadmap for Product Security, spanning application security, vulnerability management, offensive security, AI product security, and product vulnerability response.
  • Lead and grow a multi-team organization of managers and senior ICs, including hiring engineering managers.
  • Build an agentic-first vulnerability program where agents discover, triage, and remediate issues at scale.
  • Own vulnerability management end to end across CoreWeave's infrastructure and products.
  • Run a tiered offensive security program combining continuous agentic testing, third party assessments, an internal team, and external researchers.
  • Adversarial testing of models, agents, and inference stack, including prompt injection, poisoned tools, and abuse of autonomy.
  • Apply offensive security to tenant isolation across shared GPUs, bare metal, and Kubernetes.
  • Build the paved road for CoreWeave engineers: secure defaults, controls in existing tools, and validated findings with fixes.
  • Establish a secure development lifecycle for the business, including threat modeling, secure design review, and security tooling in CI/CD.
  • Own security for CoreWeave's AI products and AI tooling, including model and dataset supply chain, agent tooling, and AI-generated code provenance.
  • Stand up and run product vulnerability response (PSIRT): intake, coordinated disclosure, customer communication, and fixes.
  • Embed Product Security Partners in critical product areas with authority for design-time security decisions.
  • Maintain a standing leadership cadence with Product Management.
  • Partner with Cloud Security, Platform Security, Detection and Response, and GRC to ensure clear boundaries and clean handoffs.

Requirements

  • 10+ years in security or software engineering, with significant time in application security, vulnerability management, or offensive security.
  • 5+ years of security leadership experience, including managing managers and scaling a multi-team organization.
  • Proven track record of building or running a product security program at a cloud provider, security company, or large-scale SaaS business.
  • Experience taking over existing teams and integrating them into one organization.
  • A track record of influencing engineering leaders on architecture and roadmap decisions.
  • A strong bias for action; scrappy, fast-moving, and outcome-oriented.
  • Hands-on depth in modern application security.
  • Experience operating a vulnerability management program at scale, including metrics, SLAs, and executive reporting.
  • Direct experience with offensive security, either running a red team or penetration testing program or performing the work.
  • Working knowledge of how AI systems are built and deployed, and of new security problems with LLMs, agents, and model supply chains.
  • Familiarity with Kubernetes, cloud infrastructure, and CI/CD.
  • Experience building and mentoring diverse, inclusive, high-performing teams in a fast-paced environment.
  • Must be a U.S. person (U.S. citizen or national, U.S. lawful permanent resident, refugee, or asylee) or eligible to access export controlled information without authorization, or eligible to obtain authorization.

Skills

  • Application Security
  • Vulnerability Management
  • Offensive Security
  • AI Product Security
  • Product Vulnerability Response
  • Threat Modeling
  • Secure Design Review
  • Security Tooling in CI/CD
  • Kubernetes
  • Cloud Infrastructure
  • CI/CD
  • LLMs
  • Agents
  • Model Supply Chains
  • Prompt Injection
  • Poisoned Tools
  • Abuse of Autonomy
  • Tenant Isolation
  • Red Teaming
  • Penetration Testing
  • Vulnerability Disclosure
  • Bug Bounty Programs
  • AI Agents
  • LLM-based Tooling

Location

  • US

Work Type

  • Full-time

Experience Level

  • Director
  • 10+ years in security or software engineering
  • 5+ years of security leadership experience

Salary/Compensations

  • $227,000 to $303,000

Benefits

  • Discretionary bonus
  • Equity awards
  • Medical, dental, and vision insurance - 100% paid for by CoreWeave
  • Company-paid Life Insurance
  • Voluntary supplemental life insurance
  • Short and long-term disability insurance
  • Flexible Spending Account
  • Health Savings Account
  • Tuition Reimbursement
  • Ability to Participate in Employee Stock Purchase Program (ESPP)
  • Mental Wellness Benefits through Spring Health
  • Family-Forming support provided by Carrot
  • Paid Parental Leave
  • Flexible, full-service childcare support with Kinside
  • 401(k) with a generous employer match
  • Flexible PTO
  • Catered lunch each day
  • A casual work environment
  • A work culture focused on innovative disruption

About the Company

  • CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence.
  • Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability.
  • Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025.
  • We support and encourage an entrepreneurial outlook and independent thinking.
  • We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems.
  • As we get set for takeoff, the organization's growth opportunities are constantly expanding.
  • You will be surrounded by some of the best talent in the industry, who will want to learn from you, too.

Equal Opportunity

  • CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace.
  • All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information.
  • CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship.