Security Programs Senior TPM - OT & Network Security
hace 7 días
Livingston
Job Description CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com. What You'll Do: The Product Engineering organization is responsible for executing and delivering CoreWeave's products, platforms, processes, and tools. As a security technical program leader focused on Operational Technology (OT) Security and Network Security, you will work across cross-functional teams — including security engineering, physical security, data center operations, threat intelligence, TPRM, legal, and network engineering — to build authoritative visibility, close architectural gaps, and drive accountability across owned data centers and third-party colocation providers. If you are passionate about identity, access, and cloud security, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you! About the role: • Stand up CoreWeave's OT Security program from the ground up — spanning networking, architecture, asset management, and vulnerability management — across data centers CoreWeave owns and operates, • Collaborate with Data Center Operations team to build and maintain an authoritative OT asset inventory across power infrastructure, cooling/HVAC, building management systems (BMS), environmental sensors, and physical security systems (e.g., Genetec, badge access, biometrics, cameras), including ownership and criticality, • Define and operationalize an OT vulnerability management lifecycle — discovery, prioritization, remediation SLAs, and exception handling — suited to systems that can't be patched like standard IT assets, • Drive compliance, assurance, and accountability for OT security across third-party colocation providers, including defining the standards CoreWeave expects, the evidence required to demonstrate them, and escalation paths when providers fall short, • Drive CoreWeave's Network Security program, maintaining authoritative visibility into production network devices, configurations, ownership, and access rules, with a defined process for tracking and resolving material gaps, • Drive the security standards and controls for network device administration and access policy, ensuring requirements are consistently enforced, verified, and reviewed through a formal exception process, • Design the Network Security program to scale across new global sites and deployment models as CoreWeave expands, • Partner day-to-day with a primary Security Engineering Manager and Technical Lead across Network Security and OT Security to translate technical priorities into sequenced, resourced program plans, • As programs are defined and stood up, clearly define program strategy, scope, milestones, and success metrics while managing risks and dependencies across both workstreams, • Act as the primary point of contact for cross-functional stakeholders, providing regular status updates, addressing risks, and ensuring accountability, • Tailor communications to a diverse audience — from data center operations and network engineers to the CISO organization and executive stakeholders Who You Are: • 8+ years of hands-on Technical Program Management experience, with a strong focus on security, data center infrastructure, or network engineering programs, including experience standing up a program from the ground up, • A Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent job experience, • Working knowledge of OT/ICS environments and their common systems (power distribution, UPS/generators, cooling/HVAC, BMS, environmental monitoring) or of physical security systems (access control, biometrics, video management/Genetec-class platforms), • Solid understanding of network security fundamentals — segmentation, access control lists, administrative access hardening, and network device configuration management, • Demonstrated ability to convert ambiguous, cross-functional problems into a scoped program with clear ownership, milestones, and measurable outcomes, • Experience driving accountability with third parties (vendors, colocation providers, OEMs) on security requirements, including defining evidence standards and escalation paths, • Proficiency in program management tools and methodologies (e.g., Jira, hands-on dashboard development), with a focus on delivering measurable results, • Strong leadership, interpersonal, and influencing skills, with a proven ability to build relationships across technical and non-technical teams, • Ability to lead cross-functional teams to prioritize, manage tradeoffs, identify gaps and risks, drive accountability, and operate autonomously across multiple teams and organizations Preferred: • Direct experience securing OT/ICS environments in a data center, critical infrastructure, energy, manufacturing, or industrial setting, • Familiarity with OT-specific frameworks and standards (e.g., NIST SP 800-82, IEC 62443, Purdue Model), • Experience running network device inventory, hardening, or default-deny control-plane initiatives at scale (multi-site or multi-region), • Experience with colocation or multi-tenant data center models, including provider governance and audit/assurance processes, • Comfortable working in a fast-moving environment and flexible working with a variety of leadership styles Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences, • Achieve More Together We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. The organization's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us! The base salary range for this role is $157,000 to $210,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment, • A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: careers@coreweave.com. Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.
