Associate Security Researcher

Supports Cobalt's Offensive Security Research team as a hands-on generalist who will be mentored into a full Security Researcher. The researcher builds containerised test labs in Docker and GCP, scripts automation in Python, Bash or Go, helps evaluate autonomous security tools and LLM and MCP integrations, and reviews specialised penetration test reports for technical accuracy.

The team wants one to three or more years across systems administration, DevSecOps, development, security operations or junior pentesting, with solid pentesting fundamentals, practical scripting and clear technical writing. Remote, limited to the continental US, with Eastern or Central time preferred.