Vulnerability Remediation Engineer II

CoreWeave•Sunnyvale, CA

9d•$173,056 - $181,000•Hybrid

About The Position

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com. Job Title: Vulnerability Remediation Engineer II Employer: CoreWeave, Inc. Location: 290 W. Mt. Pleasant Ave., Suite 4100, Livingston, NJ 07039 Duties Coordinate and conduct cybersecurity assessments, identify any gaps and potential threats, and work with the engineering and technology teams to carry out remediation plans. Manage the vulnerability assessment life-cycle from beginning to end. Assessment activities include pre-assessment meetings, artifact/evidence collection, assessment workflow management, cybersecurity assessment report generation, and documenting risks associated with compliance issues. Organize network-based scans to identify possible network security vulnerabilities and host-based scans to identify vulnerabilities in workstations, servers, and other network hosts. Record non-compliance as gaps and assist impacted technology teams to remediate them. Telecommuting Telecommuting permitted 50%: work may be performed within normal commuting distance from the CoreWeave, Inc. office in Livingston, NJ.

Requirements

Bachelor's degree (U.S. or foreign equivalent) in Information Security, Computer Science, or related field and five (5) years of experience in an Information Security Analyst role
OR
Master’s degree (U.S. or foreign equivalent) in Information Security, Computer Science, or related field and three (3) years of experience in an Information Security Analyst role.
Must have three (3) years of experience in:
Vulnerability analysis, remediation, or IT program management
Experience in or leading a vulnerability assessment and remediation team
Industry standards and regulations, including SOC 2, ISO27001:2022, or GDPR

Responsibilities

Coordinate and conduct cybersecurity assessments, identify any gaps and potential threats, and work with the engineering and technology teams to carry out remediation plans.
Manage the vulnerability assessment life-cycle from beginning to end.
Assessment activities include pre-assessment meetings, artifact/evidence collection, assessment workflow management, cybersecurity assessment report generation, and documenting risks associated with compliance issues.
Organize network-based scans to identify possible network security vulnerabilities and host-based scans to identify vulnerabilities in workstations, servers, and other network hosts.
Record non-compliance as gaps and assist impacted technology teams to remediate them.