# Senior Counsel, Cyber Security and Incident Response **Company**: CoreWeave **Location**: Livingston, NJ **Experience**: senior **Job type**: full-time **Salary**: $157,000 to $210,000 **Category**: Legal **Industry**: Technology **Apply**: https://job-boards.greenhouse.io/coreweave/jobs/4708305006?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_e6a3c072-225 ## Description CoreWeave is The Essential Cloud for AI. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. As Senior Counsel, Cybersecurity & Incident Response, you will serve as a key legal partner to Security and other cross-functional teams on cybersecurity preparedness, incident response, and related regulatory compliance. ## Responsibilities: - Provide timely, practical legal advice throughout the cybersecurity incident lifecycle, including triage, investigation, containment, remediation, recovery, and post-incident review. - Partner closely with Security, Privacy, IT, Engineering, Product, Communications, Customer Support, Insurance, and business leaders to coordinate legally sound incident response and decision-making. - Direct or support privileged investigations, including engagement of outside counsel and forensic firms, evidence preservation, root-cause analysis, documentation, and interactions with law enforcement. - Assess notification and disclosure obligations under applicable cybersecurity, privacy, data breach, securities, and sector-specific laws, as well as customer, vendor, insurance, and other contractual requirements. - Draft and review executive and Board updates, customer and regulatory notices, law-enforcement communications, and other incident-related communications for accuracy, consistency, and legal risk. - Advise on cybersecurity laws, regulations, regulatory inquiries, and enforcement trends affecting cloud infrastructure and technology companies, and translate requirements into scalable controls and processes. - Develop and maintain incident response plans, legal playbooks, notification matrices, escalation criteria, decision records, and training; design and participate in tabletop exercises and drive legal follow-up actions. ## Requirements: - 4+ years of relevant legal experience, including meaningful experience advising on cybersecurity incidents, data breaches, digital investigations, or cybersecurity regulatory matters; a mix of law firm and in-house experience is preferred. - Demonstrated ability to independently manage complex and sensitive cybersecurity matters and provide clear advice in fast-moving, high-pressure situations with incomplete facts. - Strong working knowledge of U.S. federal and state breach notification requirements, cybersecurity regulatory frameworks, and contractual incident notification obligations; familiarity with international requirements is a plus. - Experience assessing incident materiality, escalation, notification, and disclosure issues and documenting defensible legal decisions. - Experience conducting privileged investigations and working with cybersecurity professionals, forensic investigators, outside counsel, regulators, and law enforcement. - Ability to understand technical facts, ask precise questions, and translate forensic findings, system architecture, logs, and security concepts into actionable legal guidance. - Excellent drafting and communication skills, including experience preparing concise executive updates and accurate customer, regulator, and public-facing communications. - Strong judgment, discretion, and composure, with the ability to prioritize competing demands and support significant incidents outside standard business hours when necessary. - Proven ability to build trusted relationships and work cross-functionally with technical, operational, communications, commercial, and executive stakeholders. - J.D. from an accredited law school and active membership in at least one U.S. state bar (NY, NJ, CA, DC, or WA preferred). ## Preferred Qualifications: - Experience advising a high-growth cloud, SaaS, data center, infrastructure, or other technology company. - Experience with public-company cybersecurity materiality, governance, and disclosure processes. - Experience advising on ransomware, insider threats, supply-chain incidents, credential compromise, and cloud security events. - Experience developing and testing incident response plans, legal playbooks, and tabletop exercises. - Privacy or cybersecurity credentials such as CIPP/US, CIPP/E, CIPM, CISSP, or comparable training. ## What We Offer: - The base salary range for this role is $157,000 to $210,000. - A comprehensive benefits program, including medical, dental, and vision insurance, company-paid Life Insurance, short and long-term disability insurance, flexible spending account, health savings account, tuition reimbursement, employee stock purchase program, mental wellness benefits, family-forming support, paid parental leave, flexible childcare support, 401(k) with a generous employer match, flexible PTO, catered lunch each day in our office and data center locations, a casual work environment, and a work culture focused on innovative disruption. ## Skills ### Required - cybersecurity - incident response - regulatory compliance - data breach - digital investigations - cybersecurity laws - breach notification ### Nice to have - cloud computing - SaaS - data center - infrastructure - ransomware - insider threats - supply-chain incidents - credential compromise - cloud security events - CIPP/US - CIPP/E - CIPM - CISSP --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/coreweave/jobs/4708305006?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)