Director, Product Security

Role description

Role Overview

The Product Security team at CoreWeave is responsible for making sure everything we ship, and everything we use to build it, is secure by design. The team owns application security, vulnerability management, offensive security, AI product security, and product vulnerability response across CoreWeave. We partner closely with Product, Engineering, and the rest of Security Foundations.

What You Will Do

Define and drive the strategy and roadmap for Product Security at CoreWeave, spanning application security, vulnerability management, offensive security, AI product security, and product vulnerability response. Lead and grow a multi-team organization of managers and senior ICs, including hiring the engineering managers who will run each function.

Why It Might Be a Fit

You will own the strategy and roadmap for product security across the company, lead the managers and senior engineers who run AppSec, vulnerability management, and offensive security, and build the capabilities we don't have yet. You will also set the bar for how security shows up for CoreWeave engineers: a paved road instead of a toll booth, a product they want to use rather than a tax they have to pay.

Requirements

• 10+ years in security or software engineering, with significant time in application security, vulnerability management, or offensive security.
• 5+ years of security leadership experience, including managing managers and scaling a multi-team organization.
• Proven track record of building or running a product security program at a cloud provider, security company, or large-scale SaaS business.
• Experience taking over existing teams and integrating them into one organization.
• A track record of moving engineering leaders on architecture and roadmap decisions you don't own.
• Hands-on depth in modern application security.
• Experience operating a vulnerability management program at scale, including metrics, SLAs, and executive reporting, and strong opinions about how to do it well.
• Direct experience with offensive security, either running a red team or penetration testing program or having done the work yourself.
• Working knowledge of how AI systems are built and deployed, and of the new security problems that come with LLMs, agents, and model supply chains.
• Enough familiarity with Kubernetes, cloud infrastructure, and CI/CD to be credible with the engineers who build them.
• Experience building and mentoring diverse, inclusive, high-performing teams in a fast-paced environment.

Benefits

• Medical, dental, and vision insurance
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside
• 401(k) with a generous employer match
• Flexible PTO
• Catered lunch each day in our office and data center locations
• A casual work environment
• A work culture focused on innovative disruption