Senior Security Engineer, CoreWeave

• This role requires deep expertise
• 5+ years of progressive experience in cloud security architecture and engineering
• Deep and demonstrable understanding of public cloud platforms (e.g., GCP, AWS, Azure)
• Proven experience in designing, implementing, and automating security controls in cloud environments across the entire stack
• Proficient in Go and/or Python (you can write software in one of these languages)
• A track record of creating meaningful technical documentation that teammates actually want to read
• Familiarity with modern CI/CD practices and Infrastructure-as-Code tooling, especially Terraform
• To conform to U.S. Government export regulations applicable to that information, applicant must either be:
• (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158 or;
• (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency

Desirable

• As a Cloud Security Engineer at CoreWeave, you'll drive the security related efforts related to the design, implementation, and maintenance of secure cloud environments
• You’ll use your deep expertise in public cloud security principles, best practices, and cutting edge technologies to define secure baselines, enforce policies, and embed security into public cloud architectures
• You’ll be a champion of automation and everything-as-code
• You’ll more than likely draw the owl as well
• Design, implement, and maintain scalable and robust security solutions for public cloud environments, utilizing guardrails, policies, and industry-leading practices
• Define and maintain comprehensive security baseline requirements, policies, and standards for public cloud platforms (e.g., AWS, Azure, GCP)
• Lead the design, implementation, and automation of security controls in public cloud environments, including primitives such as IAM, detection and monitoring, configuration management, and data protection
• Utilize everything-as-code tools such as Terraform, to automate as much toil as possible
• Collaborate effectively with cross-functional teams, such as Product Engineering, and internal security teams