AI Security Researcher
Cogent Security1 day ago
Responsibilities
- Design and build red-team agents, agent harnesses, tools, Model Context Protocol servers, and agent-executable offensive skills.
- Develop full-chain attack capabilities across Windows, Active Directory, on-premises, cloud, and network environments.
- Build detection-evasion capabilities and operate detonation and detection loops against real EDR systems.
- Design and operate realistic cyber ranges containing EDR, SIEM, logging, and other production defenses.
- Create evaluation tasks and benchmarks, including IntrusionBench, with verifiable success criteria.
- Verify critical and high-severity attack paths in customer environments and feed findings into agents and detections.
- Represent Cogent in the offensive security community through research, talks, and open-source contributions.
Requirements
- At least 6 years of experience in offensive security, red-team operations, or adversary emulation.
- Hands-on experience running full-chain operations from initial access through post-exploitation across Windows, Active Directory, and on-premises environments.
- Deep experience with command-and-control frameworks such as Mythic, payload development, and EDR detection evasion.
- Ability to write code such as Python to automate manual tradecraft into repeatable capabilities.
- Experience standing up and operating realistic test environments or cyber ranges with EDR, SIEM, and logging.
- Cloud identity and access management, cloud misconfiguration, CI/CD, or network attack experience is preferred.
- Experience building security evaluations or benchmarks, contributing open-source tooling, giving conference talks, publishing offensive-security research, or working with AI agents and LLM tooling is preferred.
About Cogent Security
Cogent Security builds AI-native vulnerability management software for enterprise security teams, using autonomous agents to analyze large-scale environment data and prioritize and remediate risk. The privately held company, founded in 2024 and headquartered in San Francisco, partners with Fortune 500 organizations and is backed by Greylock Partners. Its model centers on selling an enterprise platform and post-sales solutions that deploy at production scale.