Senior Security Researcher

Cobalt.io
United States
Workplace: RemoteFull timeUSD 120,000 - 150,000 annuallyFunction: Research & Scientific (R&D)Experience: 5+ yearsSkills: ["Technical communication","Mentorship","Cross-functional collaboration","Research","Documentation"]

Conduct advanced vulnerability research and security assessments across modern application and OS stacks, cloud infrastructure, and enterprise systems. You’ll identify high-impact flaws, develop exploit techniques and proof-of-concepts, and innovate threat research methodologies across APIs, mobile platforms, containers, and AI/ML security. Work within the Offensive Security Research team to turn findings into scalable platform tooling, automated workflows, and actionable remediation guidance—while mentoring junior researchers and sharing work through technical publications and conferences.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Cobalt.io
Cobalt.io
1 day ago

Senior Security Researcher

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live

Job Summary

Conduct advanced vulnerability research and security assessments across modern application and OS stacks, cloud infrastructure, and enterprise systems. You’ll identify high-impact flaws, develop exploit techniques and proof-of-concepts, and innovate threat research methodologies across APIs, mobile platforms, containers, and AI/ML security. Work within the Offensive Security Research team to turn findings into scalable platform tooling, automated workflows, and actionable remediation guidance—while mentoring junior researchers and sharing work through technical publications and conferences.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Research & Scientific (R&D)
Seniority: Mid level

Key Responsibilities

  • •Conduct deep-dive vulnerability research, reverse engineering, and threat analysis across web/API platforms, mobile OSes, OS stacks, cloud environments, and enterprise systems.
  • •Identify impactful vulnerabilities and develop proof-of-concept exploit techniques to demonstrate real-world risk.
  • •Research emerging threat vectors and maintain testing guidelines across cloud, APIs, mobile, and AI/ML technologies.
  • •Collaborate with Product and Engineering to translate research into scalable security assessment capabilities and automated testing workflows.
  • •Provide mentorship and technical guidance to junior researchers and represent Cobalt through public outreach such as blogs, advisories, whitepapers, and conference presentations.

Pay and Benefits

Salary: USD 120,000 - 150,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionLife Insurance401kLearning BudgetPaid LeaveParental LeaveWellness StipendRemote WorkHome Office

Key Requirements

  • •5+ years of offensive security, vulnerability research, penetration testing, red teaming, or reverse engineering (or 3+ years with published research/CVE disclosures/open-source security tooling).
  • •Expertise across modern stacks, including Node.js, Go, Python, Java, Rust, and OS internals (Linux/Windows/macOS).
  • •Ability to analyze binaries/source/bytecode and construct reliable PoC exploits for complex vulnerability classes (e.g., memory corruption, auth bypass, SSRF/RCE, cloud privilege escalation).
  • •Strong tooling/automation skills using Python, Go, Bash, or Rust to build custom research tools and testing utilities.
  • •Clear documentation skills to translate complex findings into actionable remediation guidance.
Experience:5+ yearsOffensive securityVulnerability researchPenetration testingRed teamingReverse engineering
Skills:Technical communicationMentorshipCross-functional collaborationResearchDocumentation
Certifications:OSCPOSEPOSWEOSEEGXPNAWS Certified Security Specialist
Languages:English
Tech Stack:Node.jsGoPythonJavaRustLinuxWindowsMacOSDockerKubernetesAWSGCPAzureK8sBashGhidraIDA ProBinary NinjaGDBLLDB

Company Brief

Cobalt.io
Provides a platform that connects businesses with a vetted community of security researchers to deliver modern penetration testing as a service (PTaaS), helping teams identify and remediate security vulnerabilities faster.
Industry: Cybersecurity
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: San Francisco, United States
Founded: 2013
Website