Job Closed

This listing is no longer active.

Cobalt logo
Cobalt

Modern pentesting for security and development teams.

Associate Security Researcher

Security EngineerSecurity EngineerOtherRemoteMid LevelTeam 201-500H1B SponsorCompany SiteLinkedIn

Location

United States

Posted

153 days ago

Salary

$55K - $85K / year

Seniority

Mid Level

High SchoolEnglishAWSAzureGCPPython

Job Description

Associate Security Researcher

Cobalt

• Leverage your sysadmin background to set up research environments, manage lab infrastructure, and ensure our tooling is stable. • Assist in simulating threats (Red) while documenting detection gaps and defensive improvements (Blue). • Perform data collection, log analysis, and initial vulnerability triaging to support Senior Researchers. • Maintain high-quality documentation of research findings, scripts, and internal wikis. • Engage in a structured growth path to evolve from foundational sysadmin/support tasks into deep offensive security research. • Perform technical authorship and quality control for the TPM organization by reviewing penetration testing findings and final reports to ensure accuracy and actionable remediation guidance.

Job Requirements

  • The Sysadmin Spirit: You have a background in systems administration or IT operations. You understand servers, networking, permissions, and logs because you’ve managed them.
  • Security Mindset: You have a strong grasp of security fundamentals and likely hold certifications such as Security+, CySA+, GSEC, or are working toward an OSCP.
  • Pentesting Awareness: You understand the methodology of a penetration test (recon, scanning, exploitation), even if you haven't been a full-time pentester yet.
  • US-Based: For logistical and compliance reasons, this role is strictly limited to candidates residing in the United States.
  • Time Zone Alignment: Preference will be given to candidates in EST or CST to align with our team’s morning-heavy meeting schedule.
  • Bonus Points if:
  • You have experience with automation (Python, Bash, or PowerShell).
  • You have an interest in cloud security (AWS/GCP/Azure).
  • You enjoy "tinkering" in a home lab environment.

Benefits

  • Earn competitive compensation and an attractive equity plan
  • Save for the future with a 401(k) program (US) or pension (EU)
  • Benefit from medical, dental, vision and life insurance (US) or statutory healthcare (EU)
  • Leverage stipends for:
  • Wellness
  • Work-from-home equipment & wifi
  • Learning & development
  • Make the most of our flexible, generous paid time off, and paid parental leave

Related Categories

Related Job Pages

More Security Engineer Jobs

Full TimeRemoteTeam 5,001-10,000H1B Sponsor

• Being a trusted DDoS advisor and subject matter expert: Supporting the field sale team and directly engaging with customer and prospects • Working closely with the enablement, marketing and product teams to help refine sales motions and influence product strategy • Delivering high value task within the sales cycle from qualification, needs analysis, detailed product overviews, competitive positioning, handling objections and close • Being accountable for your sales target and overachieving on that sales target • Building customer relationships and qualifying opportunities such that the sales forecast is accurate

Poland
Job Closed
OtherRemoteTeam 51-200Since 1948H1B No Sponsor

• Own vulnerability management, SIEM tuning and monitoring, incident response, and threat investigation. • Maintain secure baseline configurations (CIS, hardening standards). • Oversee AWS security controls, including IAM governance, cloud logging, encryption standards, network security boundaries, and enforcement of cloud security guardrails. • Design and approve security controls for new systems, infrastructure changes, and applications. • Govern identity security, privileged access, MFA enforcement, and periodic access reviews. • Provide security oversight for DevOps pipelines and cloud deployments. • Lead annual risk assessments, security reviews, and third-party/vendor risk management. • Own the Disaster Recovery (DR) governance program, including planning, documentation, tabletop exercises, and driving remediation, while partnering with Infrastructure on technical DR execution. • Manage data protection and data classification practices. • Track and report security KPIs, risks, and initiatives to the ISO.

California
$145K - $160K / year
Job Closed
Syntax logo

Security Engineer

Syntax

Enterprise Cloud / ERP Consulting / Managed Services

Security Engineer154 days ago
Full TimeRemoteTeam 1,001-5,000Since 1972H1B Sponsor

• Advising our customers on all security-related issues – from design to development • Analyzing, designing, and continuously developing our security services, as well as helping to define new managed security offerings • Working with modern security technologies such as EDR/XDR, IDS/IPS, PAM, vulnerability management, and SIEM • Independently supporting and coordinating internal and external security incidents (detection, containment, eradication, lessons learned) • Monitoring, analyzing, and defending against current and emerging threats (threat hunting, threat intelligence) by developing the latest defense mechanisms • Collaboration on the development of new security requirements, guidelines, and controls to improve the overall security situation of our customers • Close cooperation with our European and global security team to continuously develop our solutions, methods, and automation approaches

Spain
Job Closed
OtherRemoteTeam 51-200H1B No Sponsor

• Become a trusted ally to CEOs and management teams through efficient, intelligent and accurate work, and the effective communication thereof. • Working largely independently, apply knowledge, experience, insight, and competence to partner strategically with cybersecurity clients on forward-looking finance. • This role has variety at its core. From presenting at investor meetings to building financial models for clients, no day will be a “typical day” (hence the typical, atypical day). • You will help bridge the gap between legacy financial thinking and new ecosystems, functions and capital flows. • You will be supporting our startup clients who need high-level finance help but may not have a need for a full-time internal CFO at their current stage. • You will be managing the entire Finance function for your clients, so you’ll want to be comfortable managing a team. • You will have the opportunity to build out robust processes and systems for our clients. So understanding + embracing the agile and scrappy nature of startups is a must.

New York