Senior Manager, Cyber Threat Intelligence

CoreWeave•Sunnyvale, CA

20h•$207,000 - $275,000

About The Position

CoreWeave is hiring a Senior Manager, Cyber Threat Intelligence to lead the team that identifies cyber adversaries targeting the company and translates intelligence into better security decisions. Reporting to the Head of Threat Intelligence, this person will own CTI program execution, people management, and technical direction across intelligence collection, analysis, threat hunting, and intelligence engineering. The role will mature a program that produces original intelligence from internal telemetry and external sources and incorporates it into security and business workflows. The Senior Manager will set priorities, develop technical talent, guide research and engineering, and engage in complex investigations when needed. The position also partners with cyber defense teams and business functions to make intelligence useful for defense, response, remediation, and decision-making. The role requires access to export-controlled information. Applicants must meet the applicable U.S. government export-control eligibility requirements described in the posting. CoreWeave may decline to pursue an export licensing process for legitimate business reasons.

Requirements

10+ years of experience in cyber threat intelligence, security research, threat hunting, detection engineering, or related disciplines.
3+ years directly managing technical security or intelligence teams.
Demonstrated success building or maturing a CTI program, with evidence that its intelligence improved security operations, engineering priorities, or business decisions.
Strong understanding of adversary tradecraft and ability to evaluate technical research, hunt hypotheses, detection logic, and investigative findings across cloud, identity, endpoint, and network environments.
Experience overseeing intelligence platforms, data integrations, and automation, with sufficient engineering depth to guide design decisions and evaluate implementation quality.
Strong analytical and communication skills, including distinguishing observed activity from assessment and briefing technical findings to senior leadership.
Experience setting priorities, developing people, and coordinating delivery across teams in a rapidly changing environment.

Nice To Haves

Experience protecting cloud infrastructure, Linux and Kubernetes environments, or AI platforms.
Experience developing original collection capabilities, including deception systems or custom telemetry.
Background in incident response, malware analysis, offensive security, or vulnerability research.
Working knowledge of Python, SQL, APIs, intelligence data models such as STIX, and frameworks such as MITRE ATT&CK.
Experience applying AI to intelligence workflows or building intelligence-sharing relationships across industry, government, and research communities.

Responsibilities

Hire, coach, and manage threat intelligence engineers and analysts, setting expectations for performance, analytical quality, technical delivery, and professional development.
Translate the threat intelligence strategy and stakeholder requirements into a CTI roadmap, collection plans, and delivery priorities; identify staffing, tooling, and budget needs with the Head of Threat Intelligence.
Direct research into adversaries, campaigns, and attack techniques relevant to CoreWeave’s cloud infrastructure, AI ecosystem, corporate environment, and software supply chain; evaluate intelligence sources and address collection gaps.
Own the technical development and operation of the threat intelligence platform, including ingestion, relationship analysis, integrations, and automation, and partner with other TI teams on shared intelligence and investigative case management.
Establish intelligence-informed threat hunting using internal telemetry and investigation findings, and partner with other cyber defense teams to identify threats and improve visibility.
Integrate intelligence into vulnerability and attack surface management, application security, detection engineering, and incident response so findings inform remediation priorities, detection coverage, and security engineering decisions.
Advance original intelligence collection through honeypots, canaries, deception, and custom instrumentation; oversee monitoring for exposed information and relevant third-party compromises.
Provide intelligence support during incidents by assessing adversary objectives, campaign connections, and implications for the broader environment, and feed findings into collection, hunting, and defensive improvements.
Oversee technical intelligence products and executive assessments explaining threats, business implications, and recommended actions; maintain sourcing, confidence, and analytical-rigor standards.
Partner with Insider Risk and Asset and Geopolitical Intelligence to integrate cyber intelligence into talent acquisition, HR, supply chain, mergers and acquisitions, and executive protection workflows.
Scale enrichment, correlation, and analysis through automation and appropriate use of AI while maintaining data protection and output quality and reserving analyst time for complex work.
Measure the program’s contribution to detection, response, remediation, and business decisions; assess vendor value and maintain external relationships that improve collection and intelligence sharing.

Benefits

Discretionary bonus, equity awards, and a comprehensive benefits program, based on eligibility.
Medical, dental, and vision insurance, 100% paid for by CoreWeave.
Company-paid life insurance.
Voluntary supplemental life insurance.
Short- and long-term disability insurance.
Flexible Spending Account.
Health Savings Account.
Tuition reimbursement.
Ability to participate in Employee Stock Purchase Program (ESPP).
Mental wellness benefits through Spring Health.
Family-forming support provided by Carrot.
Paid parental leave.
Flexible, full-service childcare support with Kinside.
401(k) with a generous employer match.
Flexible PTO.
Catered lunch each day in office and data center locations.
Casual work environment.
Work culture focused on innovative disruption.