Senior Counsel, Cyber Security and Incident Response

The role

You will provide legal advice during cybersecurity incidents and manage regulatory compliance. You will partner with security, privacy, and engineering teams to handle investigations, notifications, and incident response governance.

What you will do

• Provide legal advice throughout the cybersecurity incident lifecycle.
• Partner with Security, Privacy, IT, Engineering, Product, Communications, Customer Support, and Insurance teams.
• Direct or support privileged investigations and engagement of outside counsel and forensic firms.
• Assess notification and disclosure obligations under cybersecurity, privacy, data breach, and securities laws.
• Draft executive and Board updates, customer notices, and regulatory communications.
• Advise on cybersecurity laws, regulations, and enforcement trends.
• Develop and maintain incident response plans, legal playbooks, and notification matrices.
• Design and participate in tabletop exercises.

Required qualifications

• 4+ years of relevant legal experience, including advising on cybersecurity incidents, data breaches, digital investigations, or cybersecurity regulatory matters.
• Ability to manage complex cybersecurity matters and provide advice in high-pressure situations.
• Working knowledge of U.S. federal and state breach notification requirements and cybersecurity regulatory frameworks.
• Experience assessing incident materiality, escalation, notification, and disclosure issues.
• Experience conducting privileged investigations with cybersecurity professionals, forensic investigators, and law enforcement.
• Ability to translate forensic findings and security concepts into legal guidance.
• Excellent drafting and communication skills.
• Ability to support significant incidents outside standard business hours when necessary.
• J.D. from an accredited law school.
• Active membership in at least one U.S. state bar.

Nice to have

• Mix of law firm and in-house experience
• Familiarity with international requirements
• Experience advising a high-growth cloud, SaaS, data center, infrastructure, or other technology company
• Experience with public-company cybersecurity materiality, governance, and disclosure processes
• Experience advising on ransomware, insider threats, supply-chain incidents, credential compromise, and cloud security events
• Experience developing and testing incident response plans, legal playbooks, and tabletop exercises
• Privacy or cybersecurity credentials such as CIPP/US, CIPP/E, CIPM, CISSP, or comparable training
• Membership in NY, NJ, CA, DC, or WA bar

Benefits

• Medical, dental, and vision insurance - 100% paid by CoreWeave
• Company-paid Life Insurance
• Voluntary supplemental life insurance
• Short and long-term disability insurance
• Flexible Spending Account
• Health Savings Account
• Tuition Reimbursement
• Ability to Participate in Employee Stock Purchase Program (ESPP)
• Mental Wellness Benefits through Spring Health
• Family-Forming support provided by Carrot
• Paid Parental Leave
• Flexible, full-service childcare support with Kinside

Before you apply

• Must be a U.S. person (citizen, national, lawful permanent resident, refugee, or asylee) or eligible to access export controlled information.
• Position requires access to export controlled information.

About the company

CoreWeave is a cloud platform for AI that delivers technology, tools, and teams to enable innovators to build and scale AI. Founded in 2017, it became a publicly traded company in March 2025.