- Level
- Graduate & entry level
- Experience
- None required
- Work style
- Remote
- Full-time
- Pay
- $55k to $70k
At a glance
The role in plain English
This is a remote, entry-level security research role focused on supporting purple team operations. It suits candidates with a background in systems administration or IT operations who want to transition into security research. Day-to-day tasks include setting up research environments, supporting threat simulations, analysing logs, and maintaining documentation. The role offers structured mentorship and opportunities to develop deeper offensive security skills over time.
What you'll do
- Set up and manage research lab infrastructure
- Assist with threat simulations and document detection gaps
- Perform data collection and initial vulnerability triaging
- Maintain documentation of research findings and scripts
- Review penetration testing findings for technical accuracy
What they're looking for
Essential
- Background in systems administration or IT operations
- Understanding of security fundamentals
- Awareness of penetration testing methodology
- Based in the United States
Nice to have
- Experience with automation (Python, Bash, PowerShell)
- Interest in cloud security (AWS, GCP, Azure)
- Experience with home lab environments
Core skills
- Systems administration
- Log analysis
- Penetration testing
- Documentation
- Python
- Bash
- PowerShell
Certifications mentioned
- Security+
- CySA+
- GSEC
- OSCP
The shape of the job
Technical depth
2/5
Pace
2/5
Ownership
2/5
Teamwork
3/5
Cyberend's reading of the listing, not the employer's own scores.
Application toolkit
Make your application count
See which requirements your CV meets and what is missing.
Your CV is used for this answer only and never stored.
Questions to prepare for
- 01Describe how you would set up a secure research lab environment.
- 02How do you approach documenting technical research findings?
- 03Explain the basic steps of a penetration test and their purpose.
- 04How would you identify and document a detection gap during a threat simulation?
About Cobalt
No additional information on the company's activities is provided in the listing beyond its involvement in pentesting and security research.
Full job descriptionAs published by Jobicy
The Role
At Cobalt , we are evolving the way we approach security research. We are looking for an Associate Security Researcher who doesn't just want to "break things," but who wants to understand the why and how behind the defense.
This is a unique "Purple Team" role. We are looking for a candidate with a strong foundational background in Systems Administration who wants to transition into security research. You will be the bridge between red and blue—using your knowledge of how systems are built to help us identify how they are compromised and, more importantly, how to protect them.
What You’ll Do
As an Associate on this team, you will be the backbone of our research operations. You will handle the foundational "grunt work" that powers our high-level research while being mentored to become a full-scale Security Researcher.
- Foundation & Infrastructure: Leverage your sysadmin background to set up research environments, manage lab infrastructure, and ensure our tooling is stable.
- Purple Team Collaboration: Assist in simulating threats (Red) while documenting detection gaps and defensive improvements (Blue).
- Research Support: Perform data collection, log analysis, and initial vulnerability triaging to support Senior Researchers.
- Documentation: Maintain high-quality documentation of research findings, scripts, and internal wikis.
- Continuous Learning: Engage in a structured growth path to evolve from foundational sysadmin/support tasks into deep offensive security research.
- Perform technical authorship and quality control for the TPM organization by reviewing penetration testing findings and final reports to ensure accuracy and actionable remediation guidance.
Who You Are
We aren't looking for a "hardcore pentester" who only cares about the exploit. We want a curious, methodical problem-solver who understands how a network breathes.
Required Qualifications:
- The Sysadmin Spirit: You have a background in systems administration or IT operations. You understand servers, networking, permissions, and logs because you’ve managed them.
- Security Mindset: You have a strong grasp of security fundamentals and likely hold certifications such as Security+, CySA+, GSEC , or are working toward an OSCP .
- Pentesting Awareness: You understand the methodology of a penetration test (recon, scanning, exploitation), even if you haven't been a full-time pentester yet.
- US-Based: For logistical and compliance reasons, this role is strictly limited to candidates residing in the United States.
- Time Zone Alignment: Preference will be given to candidates in EST or CST to align with our team’s morning-heavy meeting schedule.
Bonus Points if:
- You have experience with automation (Python, Bash, or PowerShell).
- You have an interest in cloud security (AWS/GCP/Azure).
- You enjoy "tinkering" in a home lab environment.
Why You Should Join Us
- Grow in a passionate, rapidly expanding industry operating at the forefront of the Pentesting industry
- Work directly with experienced senior leaders with ongoing mentorship opportunities
- Earn competitive compensation and an attractive equity plan
- Save for the future with a 401(k) program (US) or pension (EU)
- Benefit from medical, dental, vision and life insurance (US) or statutory healthcare (EU)
- Leverage stipends for:
- Wellness
- Work-from-home equipment & wifi
- Learning & development
- Make the most of our flexible, generous paid time off, and paid parental leave
Pay Range Disclosure
Cobalt is committed to fair and equitable compensation practices. The salary range for this role is ($55k - 70k ) per year + equity + benefits. A candidate’s salary is determined by various factors including, but not limited to, relevant work experience, skills, and certifications. The salary range may differ in other states and may be impacted by proximity to major metropolitan cities.
Cobalt (the "Company") is an equal opportunity employer, and we want the best available persons for every job. The Company makes employment decisions only based on merit. It is the Company's policy to prohibit discrimination in any employment opportunity (including but not limited to recruitment, employment, promotion, salary increases, benefits, termination and all other terms and conditions of employment) based on race, color, sex, sexual orientation, gender, gender identity, gender expression, genetic information, pregnancy, religious creed, national origin, ancestry, age, physical/mental disability, medical condition, marital/domestic partner status, military and veteran status, height, weight or any other such characteristic protected by federal, state or local law. The Company is committed to complying with all applicable laws and providing equal employment opportunities. This commitment applies to all persons involved in the operations of the Company regardless of where the employee is located and prohibits unlawful discrimination by any employee of the Company.
Cobalt is an E-Verify employer. E-Verify is an Internet-based system operated by the Department of Homeland Security (DHS) in partnership with the Social Security Administration (SSA). It allows participating employers to electronically verify the employment eligibility of their newly hired employees in the United States.