Top Cybersecurity Jobs in New York City, NY

Lead technical direction for vulnerability management, including security tooling, automation, LLM-based workflows, risk assessment, remediation, and vulnerability investigations. Build production services integrating security data, coordinate remediation across engineering teams, participate in vulnerability response, conduct post-mortems, and mentor engineers. The role also evaluates exploitability, attack paths, CVEs, and remediation priorities across cloud, Linux, container, and Kubernetes environments.

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Architect and lead CoreWeave’s identity and access management platform for high-performance cloud infrastructure. Design scalable authentication and authorization systems, identity lifecycle management, IdP integrations, and granular permissions. Establish security, observability, reliability, and engineering standards while mentoring engineers and influencing cross-functional security initiatives. Partner with leadership on long-term technical strategy and guide distributed systems from design through global deployment.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Develop advanced threat detection capabilities, custom alert logic, threat-hunting exercises, and real-time incident response processes. The role collaborates with Red and Purple Teams, researches emerging threats, improves security visibility, contributes to security architecture and controls, and supports security assessments. Responsibilities include Kubernetes-focused detection, multiple query and programming languages, endpoint event analysis, incident containment, remediation, and occasional after-hours on-call participation.

Build and operate security infrastructure, including SIEM systems, large-scale data pipelines, searchable data lakes, and security observability capabilities. Integrate infrastructure sources, acquire and process high-volume logs, and support detection, threat hunting, and insider-risk programs. Collaborate with security, data platform, and infrastructure teams to deliver reliable, scalable solutions using Go or Python, Kubernetes, Elasticsearch, and related technologies.

Design, implement, and operate CoreWeave’s attestation infrastructure and cryptographic systems. Build services that verify cloud infrastructure integrity using hardware roots of trust, manage PKI, HSMs, secrets, and key-management integrations, and develop scalable automation for trusted infrastructure data. Collaborate across teams to deliver secure, reliable cryptographic services. Requires strong PKI knowledge, software development skills in Go or Python, Kubernetes experience, and at least five years in security or infrastructure engineering.

Lead CoreWeave’s OT and network security programs across owned data centers and colocation providers. Responsibilities include establishing asset inventories, vulnerability management, security standards, network access controls, compliance assurance, exception processes, and third-party accountability. The role translates technical priorities into program plans, manages risks and dependencies, tracks measurable outcomes, and communicates with engineering, operations, security, legal, and executive stakeholders.

Provide technical leadership for security-critical distributed systems, including authorization platforms, a Security Token Service, anomaly detection, bot defense, and API authentication gateways. Define multi-region architectures, fault-tolerance strategies, consistency models, security boundaries, observability, and operational standards. Guide architecture and design reviews, reliability and performance efforts, incident learning, and production readiness while mentoring senior engineers and aligning cross-functional teams.

Lead incident response and threat hunting efforts at CoreWeave, owning cybersecurity incidents end-to-end and developing AI-powered tools to enhance defense against threats.