Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

AI Security Researcher

Cogent Security51 open roles

Where
Remote, US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAI Security ResearcherCogent Security · Remote, US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Cogent Security's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. Cogent Security postings stay open a median of 36 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 3 days ago

Cogent Security median: 36 days open

The posting

ABOUT COGENT

Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity. AI has fundamentally changed how attacks happen, allowing malicious actors to operate at unprecedented speed and scale. Cogent's "AI Taskforce" assesses petabytes of enterprise data to remediate these issues before critical breaches occur.

To stay at the cutting edge, we blend frontier research with real-world execution. Alongside our core product work, Cogent Research serves as our applied AI lab, providing the research horsepower needed to make truly agentic security workflows a reality. We partner with Fortune 500 companies to secure some of the most complex production environments in the world.

We're backed by Greylock & Bain Capital Ventures, and we've built a team with the best minds in applied AI. Our team is comprised of people from:

- Top universities like Stanford, Berkeley, Penn, Duke, Carnegie Mellon, Waterloo

- Unicorn, high-growth companies like Scale AI, Databricks, Stripe, Tesla, Coinbase

- World class cybersecurity experts from Wiz, Abnormal AI, Zscaler

- Preeminent research labs like Deepmind and SAIL

ABOUT THE ROLE

We're hiring a Security Researcher to build the offensive side of our research - the attacker our defensive agents have to beat. You'll sit in Research and own the loop that turns real red team tradecraft into AI capability, shaping how offensive expertise becomes autonomous capability rather than just supplying the expertise.

WHAT YOU'LL DO

- Design and build our red team agents. Architect the agent harness, the tools and Model Context Protocol (MCP) servers they call, and the skills that encode how an operator actually works - from scoping and reconnaissance through payload development, delivery, Command and Control (for example Mythic), and post-exploitation toward the objective - turned into repeatable, agent-executable capabilities for our offensive agent and VR-1. You'll review the agents' runs and close the gaps.

- Push the agents to full-chain operations across every surface. Our red team agent covers application and code security today. You'll drive its extension into full attack chains - initial access, delivery and evasion, Command and Control, privilege escalation, and lateral movement - across Windows, Active Directory, and on-prem, and work with our cloud security researchers to extend coverage into cloud (identity and access management, misconfiguration, continuous integration and delivery) and network.

- Own the evasion and tradecraft edge. Build detection-evasion know-how into the agents and test harness, and the detonation and detection loop that validates it against real Endpoint Detection and Response (EDR). This is what lets our defensive agent train against a real adversary instead of a toy.

- Design and operate the cyber ranges this runs in. Build realistic environments with real defenses in place (EDR, Security Information and Event Management, logging), stood up in-house and via vendors like Ludus - Windows and Active Directory-heavy to start, extending to cloud and hybrid alongside the cloud security team. These are where agents are trained, benchmarked, and verified.

- Build the benchmarks that prove the agents improved. Turn attack paths into evaluation tasks with verifiable success criteria, feeding benchmarks like IntrusionBench, so we can measure whether each change actually makes the agents better.

- Verify critical and high-severity attack paths in real customer environments, and feed what you learn back into the agents and detections.

- Represent Cogent in the offensive security community through research, talks, and open-source contributions.

WHAT WE'RE LOOKING FOR

- 6+ years of experience in offensive security, red team operations, or adversary emulation

- Hands-on operator who has run full-chain operations end-to-end - initial access through post-exploitation - across Windows, Active Directory, and on-prem environments

- Depth in Command and Control frameworks (for example Mythic) and payload development, with real detection-evasion experience against EDR

- A builder who writes code (for example Python) to turn manual tradecraft into repeatable, automatable capability rather than one-off operations

- Experience standing up and operating realistic test environments or cyber ranges with production defenses in place (EDR, SIEM, logging)

BONUS POINTS

- Cloud (identity and access management, misconfiguration, CI/CD) or network attack experience

- Experience building evaluations or benchmarks that measure security capability

- Open-source tooling, conference talks, or published research in offensive security

- Experience working with AI agents, LLM tooling, or agentic workflows

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Cogent Security's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Cogent Security's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Cogent Security's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.