About the company
CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025.
About the role
As Senior Counsel, Cybersecurity & Incident Response, you will serve as a key legal partner to Security and other cross-functional teams on cybersecurity preparedness, incident response, and related regulatory compliance. Reporting to the Senior Director & Lead Managing Counsel, Privacy, Regulatory & Compliance.
Responsibilities
- Provide timely, practical legal advice throughout the cybersecurity incident lifecycle, including triage, investigation, containment, remediation, recovery, and post-incident review
- Partner closely with Security, Privacy, IT, Engineering, Product, Communications, Customer Support, Insurance, and business leaders
- Direct or support privileged investigations, including engagement of outside counsel and forensic firms
- Assess notification and disclosure obligations under applicable cybersecurity, privacy, data breach, securities, and sector-specific laws
- Draft and review executive and Board updates, customer and regulatory notices, law-enforcement communications
- Advise on cybersecurity laws, regulations, regulatory inquiries, and enforcement trends
- Develop and maintain incident response plans, legal playbooks, notification matrices, escalation criteria, decision records, and training
Requirements
- 4+ years of relevant legal experience, including advising on cybersecurity incidents, data breaches, digital investigations, or cybersecurity regulatory matters
- Demonstrated ability to independently manage complex and sensitive cybersecurity matters
- Strong working knowledge of U.S. federal and state breach notification requirements, cybersecurity regulatory frameworks, and contractual incident notification obligations
- Experience assessing incident materiality, escalation, notification, and disclosure issues
- Experience conducting privileged investigations and working with cybersecurity professionals, forensic investigators, outside counsel, regulators, and law enforcement
- Ability to understand technical facts and translate forensic findings, system architecture, logs, and security concepts into actionable legal guidance
- Excellent drafting and communication skills
- J.D. from an accredited law school and active membership in at least one U.S. state bar (NY, NJ, CA, DC, or WA preferred)
Preferred
- Experience advising a high-growth cloud, SaaS, data center, infrastructure, or other technology company
- Experience with public-company cybersecurity materiality, governance, and disclosure processes
- Experience advising on ransomware, insider threats, supply-chain incidents, credential compromise, and cloud security events
- Privacy or cybersecurity credentials such as CIPP/US, CIPP/E, CIPM, CISSP, or comparable training