Offensive Security Engineer, CoreWeave

• Proficiency in using at least one programming or scripting language (e.g. GoLang, Python, C/++) to solve automatable tasks and perform code reviews
• At least five years of experience in the offensive information security industry
• Penetration Testing experience
• Strong technical background and experience writing and using offensive security tooling
• Experience using Kubernetes and Kubernetes-related security measures
• Extensive experience with Linux OS environments
• Ability to navigate ambiguity and determine solutions to underlying problems
• Excellent interpersonal, verbal, and written communication skills with strong attention to detail
• Ability to work with minimal supervision while handling multiple tasks in a fast-paced environment
• A strong desire to learn new technologies and skills

Desirable

• CoreWeave’s Information Security team is seeking an experienced and talented offensive security engineer to join our team
• As part of the Information Security Organization at CoreWeave, security engineers work to measure and improve the security of internal and external infrastructure and application offerings that provide high-power compute to customers
• CoreWeave Security engineers integrate within engineering to act as a security liaison between product, engineering, and security
• They provide assurance to business & network partners that CoreWeave’s capabilities and technologies have been adequately hardened
• Perform penetration testing as well as purple and red team exercises
• Conduct threat modeling, code reviews, and design reviews for development teams within the business
• Research/stay abreast of new hacking techniques and find ways to counter them
• Find effective solutions to information security related problems
• Develop best practices and improve security standards for the organization to adhere to while maintaining our internal compliance stance and security posture
• Ability to provide solutions to complex issues; handle multiple tasks in a fast-paced environment; set priorities; meet deadlines per project scope
• Demonstrated ability to present complex, technical information to both technical and non-technical audiences
• Strong time management, good technical writing, presentation, and documentation skills
• Ability to work with minimal supervision, attention to detail, and follow-through
• Other work-related duties as assigned
• The Security Engineer works standard business hours
• CoreWeave is a fast growth startup, and the selected candidate must be willing to be flexible when they are needed
• There will be times when the Security Engineer needs to be available outside of regular business hours to support critical issues or meetings