[Hiring] AI Security Researcher @Cogent Security

Role Description

We're hiring a Security Researcher to build the offensive side of our research - the attacker our defensive agents have to beat. You'll sit in Research and own the loop that turns real red team tradecraft into AI capability, shaping how offensive expertise becomes autonomous capability rather than just supplying the expertise.

What You'll Do

• Design and build our red team agents, architecting the agent harness, tools, and Model Context Protocol (MCP) servers.
• Encode skills that reflect how an operator works, from scoping and reconnaissance through payload development, delivery, Command and Control, and post-exploitation.
• Push the agents to full-chain operations across every surface, extending coverage into cloud security and network.
• Own the evasion and tradecraft edge, building detection-evasion know-how into the agents and test harness.
• Design and operate the cyber ranges, creating realistic environments with real defenses in place.
• Build benchmarks that prove the agents improved, turning attack paths into evaluation tasks with verifiable success criteria.
• Verify critical and high-severity attack paths in real customer environments and feed insights back into the agents and detections.
• Represent Cogent in the offensive security community through research, talks, and open-source contributions.

Qualifications

• 6+ years of experience in offensive security, red team operations, or adversary emulation.
• Hands-on operator who has run full-chain operations end-to-end across Windows, Active Directory, and on-prem environments.
• Depth in Command and Control frameworks and payload development, with real detection-evasion experience against EDR.
• A builder who writes code (for example Python) to turn manual tradecraft into repeatable, automatable capability.
• Experience standing up and operating realistic test environments or cyber ranges with production defenses in place.

Requirements

• Cloud (identity and access management, misconfiguration, CI/CD) or network attack experience.
• Experience building evaluations or benchmarks that measure security capability.
• Open-source tooling, conference talks, or published research in offensive security.
• Experience working with AI agents, LLM tooling, or agentic workflows.