Security Engineering Manager, Platform Security

CoreWeave•Sunnyvale, CA

13h•Hybrid

About The Position

CoreWeave is seeking a Security Engineering Manager, Platform Security to lead and scale the Platform Security engineering function. This role is responsible for designing security into the Kubernetes-based platform and public cloud environments. It's a hands-on engineering leadership position focused on building and operating security controls, not policy writing. The manager will define strategy and execution for cloud security posture, workload isolation, platform guardrails, image integrity, and multi-cloud security across CoreWeave's infrastructure and third-party cloud platforms (AWS, GCP, Azure). The role involves leading and growing a team of platform security engineers and collaborating with Infrastructure, Platform Engineering, SRE, and other security teams to ensure platform security scales with the business. This position reports to the Senior Director of Security Foundations.

Requirements

5 to 10 or more years of experience in platform security, cloud security, infrastructure security, or adjacent security engineering domains.
3 to 5 or more years of experience leading or managing engineers, either as a people manager or technical leader with people responsibility.
Strong hands-on depth in Kubernetes security, including admission control, RBAC, network policy, runtime security, and workload isolation patterns.
Experience designing and operating security controls across multiple public cloud platforms (AWS, GCP, Azure), including IAM, account governance, and configuration management.
Preference for building and operating systems over writing policy documents.
Comfortable owning ambiguous problem spaces and turning them into clear technical plans and outcomes.
Clear communication and effective partnership across Infrastructure, Platform Engineering, SRE, and Security.

Nice To Haves

Experience with CSPM platforms such as Wiz.
Experience with container image signing and supply chain security tooling (Sigstore, Cosign, Chainguard).
Experience with infrastructure-as-code tooling, especially Terraform.
Proficiency with automation or programming languages such as Go or Python.
Experience with admission control frameworks such as OPA Gatekeeper or Kyverno.
Experience securing multi-tenant Kubernetes environments at scale.
Familiarity with security frameworks such as NIST, ISO, or SOC2 in the context of infrastructure and platform security.

Responsibilities

Own the strategy, roadmap, and execution of CoreWeave's Platform Security engineering program across Kubernetes and multi-cloud environments.
Lead and develop a team of platform security engineers through mentorship, technical direction, and performance management.
Design, build, and operate security controls for CoreWeave's Kubernetes-based platform, including workload isolation, admission control, runtime policy enforcement, and tenant boundary integrity.
Drive the security posture of CoreWeave's third-party public cloud environments (AWS, GCP, Azure), including account governance, IAM hygiene, configuration baselines, and automated guardrails.
Own and mature cloud security posture management (CSPM) capabilities, ensuring continuous visibility and automated remediation across all cloud environments.
Build and operate image integrity and supply chain security controls, including image signing, provenance verification, and base image governance.
Partner closely with Infrastructure and Platform Engineering to embed security into the Kubernetes control plane, admission pipelines, and deployment workflows.
Collaborate with Security Operations on detection, investigation, and response for platform and cloud security incidents.
Define engineering standards, guardrails, and metrics that scale platform security capabilities with the organization.
Act as a senior escalation point for platform and cloud security risks, incidents, and complex cross-functional issues.