Description:
As a Cloud Security Engineer at CoreWeave, you'll drive the security related efforts related to the design, implementation, and maintenance of secure cloud environments. This role requires deep expertise You’ll use your deep expertise in public cloud security principles, best practices, and cutting edge technologies to define secure baselines, enforce policies, and embed security into public cloud architectures. You’ll be a champion of automation and everything-as-code.
- Design, implement, and maintain scalable and robust security solutions for public cloud environments, utilizing guardrails, policies, and industry-leading practices
- Define and maintain comprehensive security baseline requirements, policies, and standards for public cloud platforms (e.g., AWS, Azure, GCP)
- Lead the design, implementation, and automation of security controls in public cloud environments, including primitives such as IAM, detection and monitoring, configuration management, and data protection
- Utilize everything-as-code tools such as Terraform, to automate as much toil as possible
- Collaborate effectively with cross-functional teams, such as Product Engineering, and internal security teams
Investing in our people is one of our top priorities, and we value candidates who can bring their diversified experiences to our teams. Here are some qualities we’ve found compatible with our team. We'd love to talk about whether this aligns with your experience and interests and what you’re excited to work on next.
Who You Are
- 5+ years of progressive experience in cloud security architecture and engineering
- Bachelor’s degree in Computer Science or related field
- Deep and demonstrable understanding of public cloud platforms (e.g., GCP, AWS, Azure)
- Proven experience in designing, implementing, and automating security controls in cloud environments across the entire stack
- Proficient in Go and/or Python (you can write software in one of these languages)
- A track record of creating meaningful technical documentation that teammates actually want to read
- Familiarity with modern CI/CD practices and Infrastructure-as-Code tooling, especially Terraform
Preferred (if Applicable)
- Open-source contributions in the public cloud security space
- Experience with operationalizing CSPM tooling (like Wiz)
- Strong understanding of threat modeling and secure design principles
- Strong knowledge and experience with modern container orchestration technologies