Senior Staff Security Researcher

Senior Staff Security Researcher

Who We Are

Cobalt was founded on the belief of a fundamental human aspiration: the desire to live better and safer. It all started in 2013, when our founders realized that pentesting can be better. Today our diverse, fully remote team is committed to helping organizations of all sizes with seamless, effective and collaborative Offensive Security Testing that empower organizations to OPERATE FEARLESSLY and INNOVATE SECURELY.

Our customers can start a pentest in as little as 24 hours and integrate with advanced development cycles thanks to the powerful combination of our SaaS platform coupled with an exclusive community of testers known as the Cobalt Core. Accepting just 5% of applicants, the Cobalt Core boasts over 400 closely vetted and highly skilled testers who jointly conduct thousands of tests each year and are at the forefront of identifying and helping remediate risk across a dynamically changing attack surface.

Cobalt is an Equal Opportunity Employer and we strive to build a diverse and inclusive workforce at our company. At Cobalt we aspire to engage with diverse individuals, communities, and organizations in order to continue to nurture our unique rich diverse culture. Join our team, and be your true self to do your best work.

Description

We are looking for a passionate, driven, self-starter to join our team as a Senior Security Researcher. Reporting to the Senior Manager of Offensive Security Research, you will help update and create new methodologies by performing research.

What You'll Do

• Innovate Service Offerings: Create and shape cutting-edge security service offerings, complete with methodologies and checklists that redefine industry standards.

• Global Collaboration: Collaborate with a global network of 450+ top-tier penetration testers, sharing knowledge and pushing the boundaries of offensive security.

• Deep-Dive Research: Immerse yourself in security research, uncovering emerging threats, vulnerabilities, and exploits before they make headlines.

• Exploit Development: Build and refine proof-of-concept (PoC) exploits, developing mitigation strategies that make a real difference.

• Thought Leadership: Publish groundbreaking research in whitepapers, blogs, and industry conferences to solidify your expertise.

• Community Engagement: Engage with the security community to stay at the forefront of industry trends while exchanging insights with fellow experts.

• Tool Development: Develop and refine security tools, enhancing research capabilities and advancing the craft of ethical hacking.

• Industry Presence: Attend security conferences and participate in events like Defcon’s hacking villages.

You Must Have

• Experience: 10+ years of penetration testing or relevant experience.

• Research Background: Prior experience in security research.

• Technical Proficiency:

• DevSecOps: Proven experience integrating security practices within DevOps workflows.

• CI/CD Pipelining: Hands-on experience with Development CI/CD pipelining and automation.

• Deployment: Demonstrated capability for deploying independent projects from conception to production.

• Adaptability: Multi-tasking skills and the flexibility to adjust to changing priorities on the fly.

• Communication: Strong written and verbal communication skills, with experience presenting or speaking at security events.

• Drive: No one needs to push you to excel; it’s just who you are.

• Passion: A genuine passion for staying ahead of security trends, participating in CTFs, and engaging in ongoing research.

Nice to Have

• Red teaming and IoT experience.

• Experience building service offerings.

• Presented research at cybersecurity conferences.

• Published technical papers for cybersecurity.

Why You Should Join Us

• Grow in a passionate, rapidly expanding industry operating at the forefront of the Pentesting industry

• Work directly with experienced senior leaders with ongoing mentorship opportunities

• Earn competitive compensation and an attractive equity plan

• Save for the future with a 401(k) program (US)

• Benefit from medical, dental, vision and life insurance (US)

• Leverage stipends for:

• Wellness

• Work-from-home equipment & wifi

• Learning & development

• Make the most of our flexible, generous paid time off and paid parental leave

Pay Range Disclosure

Cobalt is committed to fair and equitable compensation practices. The salary range for this role is ($143,000 - $214,000) per year + equity + benefits. A candidate’s salary is determined by various factors including, but not limited to, relevant work experience, skills, and certifications. The salary range may differ in other states and may be impacted by proximity to major metropolitan cities.

Cobalt (the "Company") is an equal opportunity employer, and we want the best available persons for every job. The Company makes employment decisions only based on merit. It is the Company's policy to prohibit discrimination in any employment opportunity (including but not limited to recruitment, employment, promotion, salary increases, benefits, termination and all other terms and conditions of employment) based on race, color, sex, sexual orientation, gender, gender identity, gender expression, genetic information, pregnancy, religious creed, national origin, ancestry, age, physical/mental disability, medical condition, marital/domestic partner status, military and veteran status, height, weight or any other such characteristic protected by federal, state or local law. The Company is committed to complying with all applicable laws and providing equal employment opportunities. This commitment applies to all persons involved in the operations of the Company regardless of where the employee is located and prohibits unlawful discrimination by any employee of the Company.

Cobalt is an E-Verify employer. E-Verify is an Internet-based system operated by the Department of Homeland Security (DHS) in partnership with the Social Security Administration (SSA). It allows participating employers to electronically verify the employment eligibility of their newly hired employees in the United States.