[Hiring] Senior Cybersecurity Researcher @Fortra

Role Description

We are looking for a Senior Cybersecurity Researcher to join the Cobalt Strike team. This is a hands-on applied R&D role focused on understanding modern attacker tradecraft, operating system internals, offensive security techniques, and defensive controls, then turning that research into practical product capabilities. You should be curious about how attacks work under the hood and excited to collaborate with engineers to design, validate, and deliver bleeding-edge Cobalt Strike features that are safe, responsible, and useful to authorized security teams.

• Research modern adversary tactics, techniques, and procedures, with a focus on post-exploitation tradecraft, endpoint defenses, and attacker behavior.
• Analyze security research, malware reports, proof-of-concept techniques, and developments in security controls to identify opportunities for Cobalt Strike product improvements.
• Work closely with software engineers, product managers, QA, support, and other researchers to turn research findings into practical, maintainable product capabilities.
• Prototype, document, and validate new techniques or product ideas in controlled, authorized lab environments.
• Help evaluate how offensive security techniques interact with modern Windows security features, endpoint controls, logging, detection engineering, and enterprise hardening practices.
• Produce clear technical write-ups, design notes, research summaries, and recommendations for engineering and product teams.
• Contribute to the Cobalt Strike roadmap by identifying emerging trends, customer needs, technical gaps, and opportunities for responsible adversary simulation.
• Collaborate with engineering teams during design discussions, implementation planning, testing, and validation.
• Communicate research findings to technical and non-technical audiences through internal and external presentations, documentation, blog posts, white papers, webinars, or conference-style talks.
• Participate in team planning, roadmap discussions, research reviews, and cross-functional technical discussions.

Qualifications

• Strong experience in cybersecurity research, offensive security, threat research, red teaming, penetration testing, malware analysis, reverse engineering, detection engineering, or related discipline.
• Deep curiosity about how adversaries operate and how security teams can safely emulate, detect, and respond to those behaviors.
• Working knowledge of Windows internals.
• Understanding common post-exploitation concepts, attacker tradecraft, and enterprise security controls.
• Ability to analyze technical research, threat intelligence, proof-of-concept code, malware reports, or detection logic and translate findings into clear product recommendations.
• Experience working in controlled lab environments to test techniques, validate assumptions, and reproduce technical behaviors.
• Strong analytical reasoning, problem-solving, and decision-making skills.
• Ability to write clear, accurate technical documentation for engineering, product, and customer-facing audiences.
• Ability to work independently on ambiguous research problems while communicating progress, tradeoffs, and findings clearly.
• Strong verbal and written communication skills.
• High ethical standards and sound judgment, especially when working with offensive security technology.

Requirements

• Experience using or developing with Cobalt Strike, or experience with similar adversary simulation, red team, command-and-control, or threat emulation tools.
• Experience with Windows debugging, reverse engineering, or analysis tools such as WinDbg, x64dbg, Ghidra, IDA Pro, Process Monitor, Process Explorer, Sysmon, ETW, or similar tools.
• Experience with scripting or programming languages such as Python, PowerShell, C, Java, Go, Rust, or similar.
• Experience applying AI/ML tools, including LLMs or agent-based workflows, to automate, accelerate, or augment security research, reverse engineering, detection analysis, or threat emulation workflows.
• Experience analyzing malware, loaders, implants, shellcode, process injection techniques, evasion techniques, persistence mechanisms, credential access techniques, or lateral movement behaviors in authorized research contexts.
• Experience with endpoint detection and response products.
• Experience producing public-facing security research, conference talks, technical blogs, whitepapers, webinars, or customer-facing technical content, with personal write-ups, public talks, publications, or other verifiable contributions.
• Background in military, government, or public-sector cyber operations, with an established professional network in those communities.

Benefits

• Health, dental, and vision coverage as of hire.
• Immediate enrollment in 401(k), HSA, and FSA plans.
• Flexible PTO policy.
• Tuition and personal enrichment reimbursement.
• Option to enroll in ID Theft Protection Program.