Cobalt is looking to solve the problem of improving and expanding their offensive security testing services by researching and developing new methodologies, identifying emerging threats, and creating innovative service offerings. They aim to redefine industry standards and empower organizations to operate fearlessly and innovate securely.
Requirements
- 10+ years of penetration testing or relevant experience.
- Red teaming and IoT experience
- Prior experience in security research.
- DevSecOps: Proven experience integrating security practices within DevOps workflows.
- CI/CD Pipelining: Hands-on experience with Development CI/CD pipelining and automation.
- Demonstrated capability for deploying independent projects from conception to production.
Responsibilities
- Create and shape cutting-edge security service offerings, complete with methodologies and checklists that redefine industry standards.
- Immerse yourself in security research, uncovering emerging threats, vulnerabilities, and exploits before they make headlines.
- Build and refine proof-of-concept (PoC) exploits, developing mitigation strategies that make a real difference.
- Publish groundbreaking research in whitepapers, blogs, and industry conferences to solidify your expertise.
- Develop and refine security tools, enhancing research capabilities and advancing the craft of ethical hacking.
- Collaborate with a global network of 450+ top-tier penetration testers, sharing knowledge and pushing the boundaries of offensive security.
- Engage with the security community to stay at the forefront of industry trends while exchanging insights with fellow experts.
Other
- Multi-tasking skills and the flexibility to adjust to changing priorities on the fly.
- Strong written and verbal communication skills, with experience presenting or speaking at security events.
- No one needs to push you to excel; it’s just who you are.
- A genuine passion for staying ahead of security trends, participating in CTFs, and engaging in ongoing research.
- Experience building service offerings.
- Presented research at cybersecurity conferences.
- Published technical papers for cybersecurity.
