Security Operations Engineer II

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025.

• Degree in Computer Science, Computer Engineering, Cyber Security, Information Technology or similar experience.
• 1–2+ years of experience in security operations, SOC analysis, incident response, forensics, or related field.
• Working knowledge of Linux and MacOS systems, including logging and forensic artifacts.
• Exposure to Kubernetes and interest in securing containerized environments.
• Familiarity with modern security tools such as SIEM, EDR, IDS/IPS, and firewalls.
• Solid understanding of network protocols, firewalls, VPNs, proxies, and security technologies.
• Strong analytical skills to interpret data and derive actionable insights.
• Good communication and collaboration skills, effective under pressure.

• Be part of a 24/7/365 SOC with a rotating on-call schedule complying with Polish labor regulations.
• Perform initial triage and investigation of security alerts using established playbooks and SOPs across Linux, MacOS, and Kubernetes environments.
• Utilize and query SIEM, EDR, and other security tools to detect, investigate, and respond to suspicious activity in real-time.
• Support incident response activities including analysis, containment, and remediation.
• Contribute findings to post-incident reviews to improve security defenses.
• Document investigations thoroughly and maintain runbooks and SOPs.
• Collaborate with threat intelligence and detection engineering teams to stay updated on emerging threats.
• Continuously build skills across the threat landscape, security tooling, and CoreWeave's environment.

Employment offers are conditional upon satisfactory basic criminal record check conducted in compliance with GDPR. This position requires access to export controlled information and the applicant must be a U.S. person or eligible to access such information under U.S. Government export regulations.