Associate Security Researcher

🕒 4 days ago

🇺🇸 United States – Remote

💵 $60k - $80k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cobalt

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔐 Security

☁️ SaaS

Security • SaaS

Cobalt is a leading provider of offensive security services, specializing in modern pentesting solutions. They offer a comprehensive platform that includes dynamic application security testing, network security, and cloud security. Known as the pioneers of Pentest as a Service (PtaaS), Cobalt allows organizations to efficiently scale their security efforts with on-demand access to a pool of expert pentesters. Their services are designed to help businesses identify risks and secure their infrastructure efficiently while ensuring compliance with industry standards. Cobalt's innovative approach and proven experience help companies reduce security risks and improve their overall security posture.

📋 Description

• Build, deploy, and maintain containerized testing harnesses, vulnerable lab targets, and cloud sandboxes using Docker, Linux, GCP, and AWS • Write and maintain Python, Bash, or Go scripts to automate research data collection, scanner template validation, and offensive testing workflows • Assist Senior Researchers in evaluating autonomous security tools, testing LLM and MCP integrations, and building proof-of-concept labs • Help maintain and expand offensive testing methodologies, checklists, and quarterly reviews across Web, API, Network, Cloud, IoT, and AI attack surfaces • Review specialized penetration testing findings and final reports for technical accuracy and actionable remediation guidance • Maintain documentation of research findings, scripts, and internal wikis • Present research and co-author technical blogs

🎯 Requirements

• 1 to 3+ years of hands-on experience across Systems/Cloud Administration, DevSecOps, Application Development, Security Operations, or Junior Penetration Testing • Understanding of servers, Linux/Windows internals, networking, APIs, permissions, and logs • Working proficiency with Python, Bash, or PowerShell • Familiarity with Git/GitHub and technical documentation • Hands-on familiarity with Docker, virtual machines, and home-lab or cloud environments • Solid grasp of penetration testing methodology: reconnaissance, scanning, exploitation, and remediation • Knowledge of common vulnerability classes, including OWASP Top 10, API flaws, and cloud misconfigurations • Ability to review technical findings and translate complex issues into accurate, actionable remediation guidance • Must reside in the Continental United States • EST or CST preferred; all US time zones welcome

🏖️ Benefits

• Competitive compensation • Attractive equity plan • 401(k) program (US) or pension (EU) • Medical, dental, vision and life insurance (US) or statutory healthcare (EU) • Wellness stipend • Work-from-home equipment & wifi stipend • Learning & development stipend • Flexible, generous paid time off • Paid parental leave • Ongoing mentorship opportunities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume