Responsibilities

We're hiring a Security Researcher to build the offensive side of our research - the attacker our defensive agents have to beat. You'll sit in Research and own the loop that turns real red team tradecraft into AI capability, shaping how offensive expertise becomes autonomous capability rather than just supplying the expertise.
Design and build our red team agents. Architect the agent harness, the tools and Model Context Protocol (MCP) servers they call, and the skills that encode how an operator actually works - from scoping and reconnaissance through payload development, delivery, Command and Control (for example Mythic), and post-exploitation toward the objective - turned into repeatable, agent-executable capabilities for our offensive agent and VR-1. You'll review the agents' runs and close the gaps.
Push the agents to full-chain operations across every surface. Our red team agent covers application and code security today. You'll drive its extension into full attack chains - initial access, delivery and evasion, Command and Control, privilege escalation, and lateral movement - across Windows, Active Directory, and on-prem, and work with our cloud security researchers to extend coverage into cloud (identity and access management, misconfiguration, continuous integration and delivery) and network.
Own the evasion and tradecraft edge. Build detection-evasion know-how into the agents and test harness, and the detonation and detection loop that validates it against real Endpoint Detection and Response (EDR). This is what lets our defensive agent train against a real adversary instead of a toy.
Design and operate the cyber ranges this runs in. Build realistic environments with real defenses in place (EDR, Security Information and Event Management, logging), stood up in-house and via vendors like Ludus - Windows and Active Directory-heavy to start, extending to cloud and hybrid alongside the cloud security team. These are where agents are trained, benchmarked, and verified.
Build the benchmarks that prove the agents improved. Turn attack paths into evaluation tasks with verifiable success criteria, feeding benchmarks like IntrusionBench, so we can measure whether each change actually makes the agents better.
Verify critical and high-severity attack paths in real customer environments, and feed what you learn back into the agents and detections.
Represent Cogent in the offensive security community through research, talks, and open-source contributions.

AI Security Researcher at Cogent Security · LumiJobs

AI Security Researcher

Responsibilities

Qualification

Required

Preferred

Company

Cogent Security

More roles at Cogent Security