Associate Security Researcher - Cobalt

About the Role

At Cobalt, we are evolving the way we approach security research. We are looking for an Associate Security Researcher who doesn't just want to "break things," but who wants to understand the why and how behind defense.

This is a unique "Purple Team" role designed for a candidate with a strong foundational background in Systems Administration who wants to transition into security research. You will be the bridge between red and blue—using your knowledge of how systems are built to help identify how they are compromised and, more importantly, how to protect them.

What You’ll Do

As an Associate on this team, you will handle the foundational operations that power our high-level research while being mentored to become a full-scale Security Researcher.

• Foundation & Infrastructure: Leverage your sysadmin background to set up research environments, manage lab infrastructure, and ensure tooling stability.
• Purple Team Collaboration: Assist in simulating threats (Red) while documenting detection gaps and defensive improvements (Blue).
• Research Support: Perform data collection, log analysis, and initial vulnerability triaging to support Senior Researchers.
• Documentation: Maintain high-quality documentation of research findings, scripts, and internal wikis.
• Continuous Learning: Engage in a structured growth path to evolve from foundational sysadmin/support tasks into deep offensive security research.
• Technical Authorship: Review penetration testing findings and final reports for accuracy and actionable remediation guidance.

Who You Are

Required Qualifications:

• Sysadmin Background: Experience in systems administration or IT operations. You understand servers, networking, permissions, and logs from managing them directly.
• Security Mindset: Strong grasp of security fundamentals and relevant certifications such as Security+, CySA+, GSEC, or progress toward an OSCP.
• Pentesting Awareness: Clear understanding of penetration testing methodology (recon, scanning, exploitation).
• US-Based: Candidates must reside in the United States.
• Time Zone Alignment: Preference given to candidates in EST or CST to align with morning meeting schedules.

Bonus Points:

• Experience with scripting/automation (Python, Bash, or PowerShell).
• Interest in cloud security (AWS, GCP, Azure).
• Experience with home lab environments.

Benefits

• Competitive compensation and equity plan
• 401(k) program
• Comprehensive health, dental, vision, and life insurance
• Stipends for wellness, home office equipment & Wi-Fi, and learning & development
• Flexible paid time off and paid parental leave
• Ongoing mentorship from senior security leaders