Skip to main content

Senior Counsel, Cyber Security and Incident Response

Posted today

coreweaveBrooklyn (NY)

SENIORITY

Senior

Apply (opens in a new tab)

About the role

Overview: In this role you will act as a strategic legal partner for cybersecurity preparedness and incident response, guiding teams through complex security events and regulatory obligations. You will strengthen incident response governance and playbooks for a rapidly scaling global cloud environment. You collaborate across Security, Privacy, IT, Engineering, and business leaders to ensure legally sound decision-making and communications. This position offers the chance to shape how CoreWeave detects, responds to, and recovers from incidents while maintaining legal privilege and regulatory compliance. Compensation / Benefits medical, dental, and vision insurance - 100% covered life insurance disability insurance 401(k) with generous match flexible PTO tuition reimbursement
Responsibilities: Provide timely legal guidance across the incident lifecycle (triage to post-incident review) Coordinate with cross-functional teams to align incident response with legal risk management Direct or support privileged investigations with outside counsel and forensic firms Assess and document notification obligations under cybersecurity, privacy, data breach, and sector-specific laws and contractual requirements Draft and review executive, regulatory, and customer communications for accuracy and risk Advise on applicable cybersecurity laws, standards, and enforcement trends and translate into scalable controls Develop and maintain incident response plans, playbooks, escalation criteria, and tabletop exercises
Key requirements: 4+ years of relevant legal experience including cybersecurity incidents, data breaches, digital investigations, or cyber regulatory matters Ability to manage complex cybersecurity matters independently in fast-moving environments Strong knowledge of U.S. breach notification requirements and regulatory frameworks; international familiarity a plus Experience conducting privileged investigations and working with cybersecurity professionals, investigators, counsel, regulators, and law enforcement Ability to translate technical findings into actionable legal guidance and communicate clearly Excellent drafting and communication skills for executive updates and regulator/customer communications Judicial admission and active membership in at least one U.S. state bar (NY/NJ/CA/DC/WA preferred) Willingness to work outside standard hours for significant incidents calm under pressure curiosity about technology clear legal risk communication cybersecurity incident response governance legal playbooks and tabletop exercises privileged investigations coordination

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this