# Senior Security Researcher

**Company:** [Cobalt.io](https://hotfix.jobs/companies/cobalt-io)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $120k – $150k/yr
**Experience:** 5+ years
**Skills:** Python, Go, Rust, Bash, Node.js, Java, Docker, Kubernetes, AWS, GCP, ghidra, ida pro, gdb, lldb, reverse engineering
**Posted:** 2026-08-03

> Conduct advanced vulnerability research, reverse engineering, threat analysis, and exploit development across application, mobile, operating-system, and cloud platforms. The role requires at least five years of offensive-security experience or a strong published research track record.

## Job Description

## Responsibilities
- Conduct deep-dive vulnerability research, reverse engineering, and threat analysis across modern web and API platforms, mobile operating systems, low-level operating system stacks, cloud infrastructures, and critical enterprise software.
- Identify high-impact vulnerabilities and novel attack surfaces; develop proof-of-concept exploits to demonstrate real-world risk.
- Research emerging threat vectors and maintain testing guidelines across cloud environments, APIs, mobile platforms, and AI/ML technologies.
- Collaborate with Product and Engineering teams to build scalable security assessment capabilities, automated testing workflows, and platform intelligence.
- Translate complex security research into actionable customer value and platform improvements.
- Provide technical guidance, benchmarking, mentorship, and quality assurance for complex research initiatives.
- Represent the company through technical blog posts, advisories, whitepapers, and conference presentations.

## Requirements
- 5+ years of dedicated experience in offensive security, vulnerability research, penetration testing, red teaming, or reverse engineering; alternatively, 3+ years with a proven record of published research, CVE disclosures, or open-source security tooling.
- Expertise in modern application stacks, including Node.js, Go, Python, Java, and Rust.
- Knowledge of Linux, Windows, and macOS security internals.
- Experience with containerized cloud environments, including Docker, Kubernetes, AWS, and GCP.
- Ability to analyze binary, source code, or bytecode and construct reliable proof-of-concept exploits for complex vulnerability classes.
- Strong proficiency in Python, Go, Bash, or Rust for building custom research tools, scripts, and testing utilities.
- Ability to communicate complex technical findings and remediation guidance to engineers, product teams, and executives.
- Must reside in the United States; EST or CST time-zone alignment is preferred.

## Nice to Have
- Familiarity with AI/ML security concepts, LLM risk models, and novel software integrations.
- Experience with Ghidra, IDA Pro, Binary Ninja, GDB, or LLDB.
- Published CVEs, security advisories, or bug-bounty recognition.
- Certifications such as OSCP, OSEP, OSWE, OSEE, GXPN, or AWS Certified Security Specialist.
- Contributions to open-source security tools or research projects.

## Compensation and Benefits
- OTE salary range of **$120,000–$150,000 per year**, plus equity and benefits.
- 401(k) program in the US.
- Medical, dental, vision, and life insurance in the US.
- Wellness, work-from-home equipment and Wi-Fi, and learning and development stipends.
- Flexible paid time off and paid parental leave.

## Similar roles

- [Senior Security Engineer](https://hotfix.jobs/jobs/9a4dea4c-1109-4598-ad7c-195de3c857ee) - Northwood Space - Los Angeles, CA - $120k – $190k/yr
- [Senior Detection and Response Engineer](https://hotfix.jobs/jobs/f7821d51-7239-43cf-8e2b-75cf58b7e739) - Northwood Space - Los Angeles, CA - $120k – $190k/yr
- [Senior Security Engineer, Bug Bounty](https://hotfix.jobs/jobs/5532c56d-7528-4966-9a33-ffec20c4a012) - Mozilla - Remote - $116k – $183k/yr
- [Corporate Security Lead](https://hotfix.jobs/jobs/2a1defd4-9d21-4eb0-906b-0feb7fd4acc1) - Northwood Space - Los Angeles, CA - $125k – $206k/yr
- [Senior Security Automation Engineer](https://hotfix.jobs/jobs/2e4e1230-924e-4c2c-8df4-cdee5ef22cdb) - Clickhouse - Remote - $125k – $205k/yr

**Apply:** https://hotfix.jobs/jobs/a61a61dd-461a-45b9-946e-4d325c3ebb50
**Canonical:** https://hotfix.jobs/jobs/a61a61dd-461a-45b9-946e-4d325c3ebb50