Application Security Engineer

Core Weave • Livingston, NJ

74d • $165,000 - $275,000 • Hybrid

About The Position

CoreWeave is the AI Hyperscaler, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, CoreWeave has operated a growing footprint of data centers covering every region of the US and across Europe. CoreWeave was ranked as one of the TIME100 most influential companies of 2024. As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you're someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, CoreWeave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry. CoreWeave powers the creation and delivery of the intelligence that drives innovation.

Requirements

• At least 3 years of experience directly focused on securing the software lifecycle.
• Strong skills in application architecture, secure coding reviews, and threat modeling.
• Solid experience developing secure applications or security tooling in Go, Python, or similar modern languages.
• Proven experience collaborating with developers to implement secure coding practices.
• Excellent ability to negotiate and reach consensus with developers and fellow security practitioners, as well as excellent documentation skills.
• Familiarity with modern development environments, containers, microservices, and CI/CD pipelines.

Nice To Haves

• Hands-on experience with Kubernetes security, especially as it relates to being a YAML engineer.
• Familiarity with SAST/DAST and other automated application security testing tools.
• Deep understanding of cloud-native security challenges and solutions.

Responsibilities

• Unravel and tackle application security challenges at an exhilarating scale.
• Collaborate with exceptional engineers developing cutting-edge applications and platforms.
• Enjoy the freedom and support to experiment, innovate, and significantly shape our approach to securing applications.
• Conduct architecture reviews, security assessments, and code reviews to proactively identify and fix vulnerabilities in our applications.
• Develop robust, repeatable frameworks for application security that make it easy for teams to build securely from day one.
• Collaborate closely with development teams to integrate security seamlessly into their CI/CD pipelines.
• Craft clear, practical security guidance and documentation that empowers developers.
• Actively participate in architectural discussions and provide insightful security recommendations.
• Occasionally, 'draw the owl' - figuring out innovative solutions while navigating ambiguous situations.

Benefits

• Medical, dental, and vision insurance - 100% paid for by CoreWeave.
• Company-paid Life Insurance.
• Voluntary supplemental life insurance.
• Short and long-term disability insurance.
• Flexible Spending Account.
• Health Savings Account.
• Tuition Reimbursement.
• Ability to Participate in Employee Stock Purchase Program (ESPP).
• Mental Wellness Benefits through Spring Health.
• Family-Forming support provided by Carrot.
• Paid Parental Leave.
• Flexible, full-service childcare support with Kinside.
• 401(k) with a generous employer match.
• Flexible PTO.
• Catered lunch each day in our office and data center locations.
• A casual work environment.
• A work culture focused on innovative disruption.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services