[All remote jobs](https://jobicy.com/jobs.md)[![Cobalt logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/7a1fbbfd-221.jpg)](https://jobicy.com/company/cobalt.md)[Cobalt](https://jobicy.com/company/cobalt.md) # Associate Security Researcher Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/cobalt.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 55k–70k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished31 Oct 2026Apply before30 Nov 2026Listing views46Application actions1Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Cobalt is seeking an early-career security professional with systems administration or IT operations experience to develop into a Security Researcher. The role supports purple-team research by building lab environments, collecting and analyzing logs, triaging vulnerabilities, and documenting findings. The associate will assist with threat simulation and help improve defensive detection and remediation guidance under senior mentorship. Candidates must reside in the United States, with EST or CST candidates preferred, and should understand core security and penetration-testing methodologies. Automation skills and cloud-security interest are valued as the role progresses toward offensive security research. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 3/5EasyHard ### Pace & Pressure 3/5RelaxedFast-paced ### Autonomy Level 3/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is an entry-level research role, but it requires practical systems administration knowledge, security fundamentals, and familiarity with penetration-testing workflows. The learning curve includes connecting offensive techniques with defensive detection and producing accurate technical documentation. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$62,500US market range (per year)$55k–$75k0$82.50k AI insightThe employer discloses a base salary range of $55,000–$70,000 USD per year, with equity and benefits additional. The midpoint is $62,500 annually. Estimated US market pay for an associate-level security research or purple-team role is approximately $55,000–$75,000 USD annually, varying by systems administration experience, certifications, and location. ## Core skills Skills and capabilities most closely associated with this opportunity. [Systems administration](https://jobicy.com/jobs?search_keywords=Systems%20administration.md)[Network security](https://jobicy.com/jobs?search_keywords=Network%20security.md)[Log analysis](https://jobicy.com/jobs?search_keywords=Log%20analysis.md)[Vulnerability triage](https://jobicy.com/jobs?search_keywords=Vulnerability%20triage.md)[Penetration testing methodology](https://jobicy.com/jobs?search_keywords=Penetration%20testing%20methodology.md)[Threat simulation](https://jobicy.com/jobs?search_keywords=Threat%20simulation.md)[Purple team operations](https://jobicy.com/jobs?search_keywords=Purple%20team%20operations.md)[Security research](https://jobicy.com/jobs?search_keywords=Security%20research.md)[Technical documentation](https://jobicy.com/jobs?search_keywords=Technical%20documentation.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Bash](https://jobicy.com/jobs?search_keywords=Bash.md)[PowerShell](https://jobicy.com/jobs?search_keywords=PowerShell.md)[Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Incident detection](https://jobicy.com/jobs?search_keywords=Incident%20detection.md) Sample interview questionsHow would your systems administration experience help you succeed in a security research role?Systems administration provides practical knowledge of operating systems, permissions, network services, patching, and logs. I can use that context to build realistic lab environments, recognize insecure configurations, and translate findings into remediation steps that infrastructure teams can apply. Describe the main phases of a penetration test and the purpose of each. A typical engagement begins with reconnaissance to collect information, followed by scanning and enumeration to identify hosts, services, and potential weaknesses. Testing and exploitation validate impact where authorized, then post-exploitation may assess access scope. The final phase documents evidence, risk, and actionable remediation recommendations. How would you investigate a suspicious authentication event in a log dataset? I would first establish the normal baseline for the account and service, then review timestamps, source IPs, authentication outcomes, device details, and related activity. I would correlate the event with other identity, endpoint, and network logs, determine whether indicators suggest credential misuse or misconfiguration, and document the evidence and recommended next steps. What makes a vulnerability report useful to a customer or internal engineering team? A useful report clearly explains the affected asset, the technical issue, reproducible evidence, realistic impact, severity rationale, and prioritized remediation. It should avoid ambiguity, distinguish confirmed facts from assumptions, and give practical guidance that the responsible team can implement and validate. How would you use automation in research operations? I would automate repeatable tasks such as lab provisioning, asset collection, log parsing, evidence normalization, and report-quality checks using Python, Bash, or PowerShell. I would ensure scripts are version controlled, documented, securely handle credentials, and include validation so results remain reliable. Opportunity details ## About this role. ### The Role At Cobalt, we are evolving the way we approach security research. We are looking for an Associate Security Researcher who doesn’t just want to “break things,” but who wants to understand the why and how behind the defense. This is a unique “Purple Team” role. We are looking for a candidate with a strong foundational background in Systems Administration who wants to transition into security research. You will be the bridge between red and blue—using your knowledge of how systems are built to help us identify how they are compromised and, more importantly, how to protect them. ### What You’ll Do As an Associate on this team, you will be the backbone of our research operations. You will handle the foundational “grunt work” that powers our high-level research while being mentored to become a full-scale Security Researcher. * Foundation & Infrastructure: Leverage your sysadmin background to set up research environments, manage lab infrastructure, and ensure our tooling is stable. * Purple Team Collaboration: Assist in simulating threats (Red) while documenting detection gaps and defensive improvements (Blue). * Research Support: Perform data collection, log analysis, and initial vulnerability triaging to support Senior Researchers. * Documentation: Maintain high-quality documentation of research findings, scripts, and internal wikis. * Continuous Learning: Engage in a structured growth path to evolve from foundational sysadmin/support tasks into deep offensive security research. * Perform technical authorship and quality control for the TPM organization by reviewing penetration testing findings and final reports to ensure accuracy and actionable remediation guidance. ### Who You Are We aren’t looking for a “hardcore pentester” who only cares about the exploit. We want a curious, methodical problem-solver who understands how a network breathes. Required Qualifications: * The Sysadmin Spirit: You have a background in systems administration or IT operations. You understand servers, networking, permissions, and logs because you’ve managed them. * Security Mindset: You have a strong grasp of security fundamentals and likely hold certifications such as Security+, CySA+, GSEC, or are working toward an OSCP. * Pentesting Awareness: You understand the methodology of a penetration test (recon, scanning, exploitation), even if you haven’t been a full-time pentester yet. * US-Based: For logistical and compliance reasons, this role is strictly limited to candidates residing in the United States. * Time Zone Alignment: Preference will be given to candidates in EST or CST to align with our team’s morning-heavy meeting schedule. Bonus Points if: * You have experience with automation (Python, Bash, or PowerShell). * You have an interest in cloud security (AWS/GCP/Azure). * You enjoy “tinkering” in a home lab environment. ### Why You Should Join Us * Grow in a passionate, rapidly expanding industry operating at the forefront of the Pentesting industry * Work directly with experienced senior leaders with ongoing mentorship opportunities * Earn competitive compensation and an attractive equity plan * Save for the future with a 401(k) program (US) or pension (EU) * Benefit from medical, dental, vision and life insurance (US) or statutory healthcare (EU) * Leverage stipends for: * Wellness * Work-from-home equipment & wifi * Learning & development * Make the most of our flexible, generous paid time off, and paid parental leave ### Pay Range Disclosure Cobalt is committed to fair and equitable compensation practices. The salary range for this role is ($55k – 70k ) per year + equity + benefits. A candidate’s salary is determined by various factors including, but not limited to, relevant work experience, skills, and certifications. The salary range may differ in other states and may be impacted by proximity to major metropolitan cities. Cobalt (the “Company”) is an equal opportunity employer, and we want the best available persons for every job. The Company makes employment decisions only based on merit. It is the Company’s policy to prohibit discrimination in any employment opportunity (including but not limited to recruitment, employment, promotion, salary increases, benefits, termination and all other terms and conditions of employment) based on race, color, sex, sexual orientation, gender, gender identity, gender expression, genetic information, pregnancy, religious creed, national origin, ancestry, age, physical/mental disability, medical condition, marital/domestic partner status, military and veteran status, height, weight or any other such characteristic protected by federal, state or local law. The Company is committed to complying with all applicable laws and providing equal employment opportunities. This commitment applies to all persons involved in the operations of the Company regardless of where the employee is located and prohibits unlawful discrimination by any employee of the Company. Cobalt is an E-Verify employer. E-Verify is an Internet-based system operated by the Department of Homeland Security (DHS) in partnership with the Social Security Administration (SSA). It allows participating employers to electronically verify the employment eligibility of their newly hired employees in the United States. Show more [Apply now >](https://jobicy.com/jobs/158162-associate-security-researcher.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 31 New ### [Security Operations Analyst](https://jobicy.com/jobs/158202-security-operations-analyst-2.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![Pleo logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b27fbed2-221.jpg) Pleo Oct 31 New ### [Staff Security Operations Engineer](https://jobicy.com/jobs/158135-staff-security-operations-engineer-2.md) About Pleo Messy spend management is tricky business. And tedious processes are a lose-lose situation for all involved, not just finance. At Pleo, we’re changing that. We build spend solutions… * ![OpenAI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/0523b13262b12c215d8009938f5c14f1.jpeg) OpenAI Oct 31 New ### [Software Engineer, Infrastructure Security](https://jobicy.com/jobs/152102-software-engineer-infrastructure-security.md) About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products…. * ![Veeam Software logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/f7716b71-221.jpg) Veeam Software Oct 30 New ### [Field Security Advisor](https://jobicy.com/jobs/158026-field-security-advisor.md) Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI… * ![Twilio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201023175858-722503.jpg) Twilio Oct 30 New ### [Security Engineer, Incident Response](https://jobicy.com/jobs/157930-security-engineer-incident-response-2.md) Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower… * ![Quora logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200916172339-629302.jpg) Quora Oct 30 New ### [Detection & CorpSec Engineer](https://jobicy.com/jobs/151966-detection-corpsec-engineer.md) [Quora is a privately held, “remote-first” company. This position can be performed remotely from anywhere in Canada or the United States. Please visit careers.quora.com/eligible-countries for details regarding employment eligibility by… * ![GitLab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201207055737-109952.jpg) GitLab Oct 29 New ### [Principal Security Researcher](https://jobicy.com/jobs/157887-principal-security-researcher.md) GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50… * ![Ping Identity logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/63e8d5a6-221.png) Ping Identity Oct 29 New ### [Senior Fraud Researcher](https://jobicy.com/jobs/157882-senior-fraud-researcher.md) About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it’s not just… * ![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg) Grafana Labs Oct 29 ### [Senior Software Engineer, Security Assurance | UK | Remote](https://jobicy.com/jobs/157834-senior-software-engineer-security-assurance-uk-remote.md) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale…. * ![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg) Grafana Labs Oct 29 ### [Senior Software Engineer, Security Assurance | Sweden | Remote](https://jobicy.com/jobs/157829-senior-software-engineer-security-assurance-sweden-remote.md) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale…. [Browse all jobs](https://jobicy.com/jobs.md)