Security Programs Senior TPM - OT & Network Security

CoreWeave•Sunnyvale, NY

About The Position

The Product Engineering organization is responsible for executing and delivering CoreWeave’s products, platforms, processes, and tools. As a security technical program leader focused on Operational Technology (OT) Security and Network Security, you will work across cross-functional teams — including security engineering, physical security, data center operations, threat intelligence, TPRM, legal, and network engineering — to build authoritative visibility, close architectural gaps, and drive accountability across owned data centers and third-party colocation providers. If you are passionate about identity, access, and cloud security, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you!

Requirements

8+ years of hands-on Technical Program Management experience, with a strong focus on security, data center infrastructure, or network engineering programs, including experience standing up a program from the ground up
A Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent job experience
Working knowledge of OT/ICS environments and their common systems (power distribution, UPS/generators, cooling/HVAC, BMS, environmental monitoring) or of physical security systems (access control, biometrics, video management/Genetec-class platforms)
Solid understanding of network security fundamentals — segmentation, access control lists, administrative access hardening, and network device configuration management
Demonstrated ability to convert ambiguous, cross-functional problems into a scoped program with clear ownership, milestones, and measurable outcomes
Experience driving accountability with third parties (vendors, colocation providers, OEMs) on security requirements, including defining evidence standards and escalation paths
Proficiency in program management tools and methodologies (e.g., Jira, hands-on dashboard development), with a focus on delivering measurable results
Strong leadership, interpersonal, and influencing skills, with a proven ability to build relationships across technical and non-technical teams
Ability to lead cross-functional teams to prioritize, manage tradeoffs, identify gaps and risks, drive accountability, and operate autonomously across multiple teams and organizations

Nice To Haves

Direct experience securing OT/ICS environments in a data center, critical infrastructure, energy, manufacturing, or industrial setting
Familiarity with OT-specific frameworks and standards (e.g., NIST SP 800-82, IEC 62443, Purdue Model)
Experience running network device inventory, hardening, or default-deny control-plane initiatives at scale (multi-site or multi-region)
Experience with colocation or multi-tenant data center models, including provider governance and audit/assurance processes
Comfortable working in a fast-moving environment and flexible working with a variety of leadership styles

Responsibilities

Stand up CoreWeave's OT Security program from the ground up — spanning networking, architecture, asset management, and vulnerability management — across data centers CoreWeave owns and operates
Collaborate with Data Center Operations team to build and maintain an authoritative OT asset inventory across power infrastructure, cooling/HVAC, building management systems (BMS), environmental sensors, and physical security systems (e.g., Genetec, badge access, biometrics, cameras), including ownership and criticality
Define and operationalize an OT vulnerability management lifecycle — discovery, prioritization, remediation SLAs, and exception handling — suited to systems that can't be patched like standard IT assets
Drive compliance, assurance, and accountability for OT security across third-party colocation providers, including defining the standards CoreWeave expects, the evidence required to demonstrate them, and escalation paths when providers fall short
Drive CoreWeave's Network Security program, maintaining authoritative visibility into production network devices, configurations, ownership, and access rules, with a defined process for tracking and resolving material gaps
Drive the security standards and controls for network device administration and access policy, ensuring requirements are consistently enforced, verified, and reviewed through a formal exception process
Design the Network Security program to scale across new global sites and deployment models as CoreWeave expands
Partner day-to-day with a primary Security Engineering Manager and Technical Lead across Network Security and OT Security to translate technical priorities into sequenced, resourced program plans
As programs are defined and stood up, clearly define program strategy, scope, milestones, and success metrics while managing risks and dependencies across both workstreams
Act as the primary point of contact for cross-functional stakeholders, providing regular status updates, addressing risks, and ensuring accountability
Tailor communications to a diverse audience — from data center operations and network engineers to the CISO organization and executive stakeholders