Associate Security Researcher
Description
At Cobalt, our Offensive Security Research team bridges the gap between emerging adversary tradecraft, automated security validation, and real-world penetration testing. We do not need a narrow, single-domain specialist for this seat. We are looking for a high-agency, multi-skilled Associate Security Researcher who loves building, scripting, testing, and solving practical technical problems across the stack.
Think of this role as a technical utility player for Offensive Security Research. One day you will build containerized lab environments in Docker and GCP or wire up Python scripts to benchmark emerging offensive security tools and AI models. The next day you will collaborate with Senior Researchers to validate vulnerability findings, refine testing methodologies (Web, API, Cloud, IoT, and AI/LLM), and review specialized penetration testing reports for technical accuracy. You will bring broad foundational skills across systems, code, and security, and we will mentor you into a full-scale Security Researcher.
What You’ll Do
- Research Infrastructure & Lab Engineering: Build, deploy, and maintain containerized testing harnesses, vulnerable lab targets, and cloud sandboxes (Docker, Linux, GCP/AWS) to support tool bake-offs and vulnerability research.
- Tooling & Workflow Automation: Write and maintain practical scripts in Python, Bash, or Go to automate research data collection, scanner template validation (such as Nuclei), and offensive testing workflows.
- Emerging Tech & AI Security Testing: Assist Senior Researchers in evaluating autonomous security tools, testing LLM and Model Context Protocol (MCP) integrations, and building practical proof-of-concept (PoC) labs.
- Methodology & Tradecraft Support: Help maintain and expand Cobalt's offensive testing methodologies, checklists, and quarterly methodology reviews across Web, API, Network, Cloud, IoT, and AI attack surfaces.
- Technical Quality Control & Authorship: Partner with our Technical Project Management (TPM) and Delivery teams to review specialized penetration testing findings and final reports (Red Team, Secure Code Review, IoT, Digital Risk, and AI). Ensure technical accuracy and actionable remediation guidance.
- Documentation & Knowledge Sharing: Maintain high-quality documentation of research findings, scripts, and internal wikis, with opportunities to present research and co-author technical blogs.
You Must Have
We are not looking for a point-and-click scanner operator, and you do not need to be a 10-year exploit developer. We want a curious, methodical builder and generalist. You understand how modern systems, networks, and applications fit together, and you know how to glue things together with code.
- Broad Technical Foundation (The Utility Player): 1 to 3+ years of hands-on experience across Systems/Cloud Administration, DevSecOps, Application Development, Security Operations, or Junior Penetration Testing. You understand servers, Linux/Windows internals, networking, APIs, permissions, and logs because you have built and managed them.
- Practical Scripting & Automation: Working proficiency with Python, Bash, or PowerShell, plus familiarity with Git/GitHub and technical documentation.
- Containers & Lab Environments: Hands-on familiarity with Docker, virtual machines, and home-lab or cloud environments for spinning up test infrastructure.
- Security & Pentesting Fundamentals: Solid grasp of penetration testing methodology (reconnaissance, scanning, exploitation, and remediation) and common vulnerability classes (OWASP Top 10, API flaws, cloud misconfigurations).
- Clear Technical Writing: Ability to review technical findings and translate complex issues into accurate, actionable remediation guidance.
- US-Based & Time Zone Alignment: For logistical and compliance reasons, this role is strictly limited to candidates residing in the Continental United States. Preference is given to EST or CST to align with our morning-heavy meeting schedule, though all US time zones are welcome.