Overview:
In this role you will act as a strategic legal partner for cybersecurity preparedness and incident response, guiding teams through complex security events and regulatory obligations. You will strengthen incident response governance and playbooks for a rapidly scaling global cloud environment. You collaborate across Security, Privacy, IT, Engineering, and business leaders to ensure legally sound decision-making and communications. This position offers the chance to shape how CoreWeave detects, responds to, and recovers from incidents while maintaining legal privilege and regulatory compliance. Compensation / Benefits medical, dental, and vision insurance - 100% covered life insurance disability insurance 401(k) with generous match flexible PTO tuition reimbursement
Responsibilities:
Provide timely legal guidance across the incident lifecycle (triage to post-incident review) Coordinate with cross-functional teams to align incident response with legal risk management Direct or support privileged investigations with outside counsel and forensic firms Assess and document notification obligations under cybersecurity, privacy, data breach, and sector-specific laws and contractual requirements Draft and review executive, regulatory, and customer communications for accuracy and risk Advise on applicable cybersecurity laws, standards, and enforcement trends and translate into scalable controls Develop and maintain incident response plans, playbooks, escalation criteria, and tabletop exercises
Key requirements:
4+ years of relevant legal experience including cybersecurity incidents, data breaches, digital investigations, or cyber regulatory matters Ability to manage complex cybersecurity matters independently in fast-moving environments Strong knowledge of U.S. breach notification requirements and regulatory frameworks; international familiarity a plus Experience conducting privileged investigations and working with cybersecurity professionals, investigators, counsel, regulators, and law enforcement Ability to translate technical findings into actionable legal guidance and communicate clearly Excellent drafting and communication skills for executive updates and regulator/customer communications Judicial admission and active membership in at least one U.S. state bar (NY/NJ/CA/DC/WA preferred) Willingness to work outside standard hours for significant incidents calm under pressure curiosity about technology clear legal risk communication cybersecurity incident response governance legal playbooks and tabletop exercises privileged investigations coordination