Senior Offensive Security Researcher (Remote, Equity)

Cobalt; Boston (MA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

401(k) plan

Medical, dental, vision insurance

Remote work

Equity opportunity

Work-from-home stipend

Job summary

Cobalt.io, a fully remote, US-based leader in offensive security testing, seeks a Senior Security Researcher to advance vulnerability research across modern stacks, cloud environments, and critical enterprise systems.

You will identify impactful flaws, craft PoC exploits, and collaborate with cross-functional teams to strengthen customer security postures, while mentoring junior researchers and contributing to the community with blogs and talks.

Qualifications

• 5+ years of offensive security, vulnerability research, or reverse engineering.
• Expertise in modern stacks and OS security fundamentals.
• Ability to analyze and craft PoC exploits for complex classes.
• Strong tooling/automation skills in Python/Go/Bash/Rust.

Responsibilities

• Conduct advanced vulnerability research across Web/API platforms, OS stacks, cloud infra, and critical enterprise systems.
• Develop PoC exploits to demonstrate real-world risk clearly and accurately.
• Innovate testing methodologies and tradecraft for cloud, APIs, and AI/ML workloads.
• Collaborate with product and engineering to translate findings into scalable security capabilities.
• Mentor junior researchers and contribute to community knowledge through advisories and blog posts.
• Represent Cobalt in the security community with high-impact talks and publications.

Skills

5+ years experience

Modern stacks

Node.js

Go

Python

Java

Rust

OS security fundamentals

Container cloud environments

Tools

Ghidra

IDA Pro

Binary Ninja

GDB/LLDB

Job description

Cobalt.io, a fully remote, US-based leader in offensive security testing, seeks a Senior Security Researcher to advance vulnerability research across modern stacks, cloud environments, and critical enterprise systems.

You will identify impactful flaws, craft PoC exploits, and collaborate with cross-functional teams to strengthen customer security postures, while mentoring junior researchers and contributing to the community with blogs and talks.