--- title: 'AI Security Researcher at Cogent Security' canonical: 'https://feeny.ai/job/ai-security-researcher-cogent-security-united-states-d9kvm3qefth0' type: 'job' last_seen: '2026-11-02' --- # AI Security Researcher at Cogent Security - **Company:** Cogent Security - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-27 - **Last confirmed live:** 2026-11-02 - **Apply:** https://jobs.ashbyhq.com/cogent-security/c02cda34-878e-437a-814b-fb23a9061ead ## Job description ## About Cogent Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity. AI has fundamentally changed how attacks happen, allowing malicious actors to operate at unprecedented speed and scale. Cogent's "AI Taskforce" assesses petabytes of enterprise data to remediate these issues before critical breaches occur. To stay at the cutting edge, we blend frontier research with real-world execution. Alongside our core product work, Cogent Research serves as our applied AI lab, providing the research horsepower needed to make truly agentic security workflows a reality. We partner with Fortune 500 companies to secure some of the most complex production environments in the world. We're backed by Greylock & Bain Capital Ventures, and we've built a team with the best minds in applied AI. Our team is comprised of people from: - Top universities like Stanford, Berkeley, Penn, Duke, Carnegie Mellon, Waterloo - Unicorn, high-growth companies like Scale AI, Databricks, Stripe, Tesla, Coinbase - World class cybersecurity experts from Wiz, Abnormal AI, Zscaler - Preeminent research labs like Deepmind and SAIL ## About the Role We're hiring a Security Researcher to build the offensive side of our research - the attacker our defensive agents have to beat. You'll sit in Research and own the loop that turns real red team tradecraft into AI capability, shaping how offensive expertise becomes autonomous capability rather than just supplying the expertise. ## What You'll Do - Design and build our red team agents. Architect the agent harness, the tools and Model Context Protocol (MCP) servers they call, and the skills that encode how an operator actually works - from scoping and reconnaissance through payload development, delivery, Command and Control (for example Mythic), and post-exploitation toward the objective - turned into repeatable, agent-executable capabilities for our offensive agent and VR-1. You'll review the agents' runs and close the gaps. - Push the agents to full-chain operations across every surface. Our red team agent covers application and code security today. You'll drive its extension into full attack chains - initial access, delivery and evasion, Command and Control, privilege escalation, and lateral movement - across Windows, Active Directory, and on-prem, and work with our cloud security researchers to extend coverage into cloud (identity and access management, misconfiguration, continuous integration and delivery) and network. - Own the evasion and tradecraft edge. Build detection-evasion know-how into the agents and test harness, and the detonation and detection loop that validates it against real Endpoint Detection and Response (EDR). This is what lets our defensive agent train against a real adversary instead of a toy. - Design and operate the cyber ranges this runs in. Build realistic environments with real defenses in place (EDR, Security Information and Event Management, logging), stood up in-house and via vendors like Ludus - Windows and Active Directory-heavy to start, extending to cloud and hybrid alongside the cloud security team. These are where agents are trained, benchmarked, and verified. - Build the benchmarks that prove the agents improved. Turn attack paths into evaluation tasks with verifiable success criteria, feeding benchmarks like IntrusionBench, so we can measure whether each change actually makes the agents better. - Verify critical and high-severity attack paths in real customer environments, and feed what you learn back into the agents and detections. - Represent Cogent in the offensive security community through research, talks, and open-source contributions. ## What We're Looking For - 6+ years of experience in offensive security, red team operations, or adversary emulation - Hands-on operator who has run full-chain operations end-to-end - initial access through post-exploitation - across Windows, Active Directory, and on-prem environments - Depth in Command and Control frameworks (for example Mythic) and payload development, with real detection-evasion experience against EDR - A builder who writes code (for example Python) to turn manual tradecraft into repeatable, automatable capability rather than one-off operations - Experience standing up and operating realistic test environments or cyber ranges with production defenses in place (EDR, SIEM, logging) Bonus Points - Cloud (identity and access management, misconfiguration, CI/CD) or network attack experience - Experience building evaluations or benchmarks that measure security capability - Open-source tooling, conference talks, or published research in offensive security - Experience working with AI agents, LLM tooling, or agentic workflows ## About Cogent Security ## Company Overview - **One-liner**: Cogent Security is an applied AI lab building autonomous AI agents that discover, assess, and remediate enterprise vulnerabilities at machine speed. - **Entity Type**: Private (Seed / Series A; $11M total funding) - **Headquarters**: San Francisco, California, United States - **Founded**: 2024 - **Founders**: Vineet Edupuganti (CEO), Geng Sng (CTO), Thanos Baskous (VP Engineering) [cogent.com/about-us](https://www.cogent.com/about-us) ## Core Business - **Primary industry**: Cybersecurity – specifically vulnerability management and agentic AI for security remediation. - **Target customers**: Enterprise cybersecurity teams (B2B, mid-market to large enterprises). - **Mission**: “Prevent breaches using autonomous AI systems that continuously secure systems against AI-armed adversaries operating at machine speed.” [cogent.com](https://www.cogent.com/) ## Products & Services - **[Cogent Platform]**: An AI-agent workforce that handles the full vulnerability lifecycle. Modules include **Discover** (identify vulnerable software within minutes of a disclosure), **Assess** (risk scoring based on business context), **Remediate** (from assisted to fully autonomous fix deployment), and **Report** (verified evidence-backed reporting). Type: SaaS platform with embedded AI agents. [cogent.com](https://www.cogent.com/) ## Market Standing - **Valuation/Market Cap**: Not disclosed (private company). - **Key Metric**: Total funding $11M – Seed round ($11M) led by Greylock Partners (August 2025); subsequent Series A led by Bain Capital Ventures with additional investors. [linkedin.com](https://www.linkedin.com/company/cogentsecurity) - **Notable Investors/Partners**: Greylock Partners, Bain Capital Ventures. Customers include Alteryx (CISO Lucas Moody), CSC Generation (CEO Justin Yoshimura), University of the Pacific (CISO Mo Bal). [cogent.com/about-us](https://www.cogent.com/about-us) - **Growth Signals**: 39 employees (as of mid-2025), +14% monthly headcount growth, 29 active job postings, reported 3x increase in vulnerability team output and 97% reduction in exposure window for critical vulnerabilities. [linkedin.com](https://www.linkedin.com/company/cogentsecurity) ## Competitive Advantages - **Agentic AI approach** that not only detects but also investigates, coordinates, and verifies fixes – reducing the manual burden on security teams. - **Founding team** from Google DeepMind, Abnormal Security, and Coinbase, bringing deep AI and security expertise. - **Rapid time-to-value**: 3 hours from onboarding to full vulnerability assessment. - **Strong customer satisfaction**: 4.9/5 rating from 1,200+ reviews. [cogent.com/about-us](https://www.cogent.com/about-us) ## Strategic Focus - Scaling AI agent capabilities to cover more vulnerability types and integrate deeper into enterprise workflows. - Expanding the commercial team (Sales, Solutions Engineering, TAMs) to capture growing demand. - Advancing research through **Cogent Research**, tackling open problems in dependable autonomy and AI × security. [cogent.com](https://www.cogent.com/) ## Why Work Here - **Culture**: Values include customer centricity, intentionality, ambition for excellence, extreme ownership, velocity, and intellectual honesty. [cogent.com/company/careers](https://www.cogent.com/company/careers) - **Remote/Hybrid**: In-person in San Francisco and New York, plus remote options within the US. [cogent.com/company/careers](https://www.cogent.com/company/careers) - **Engineering Culture**: Engineers and AI researchers sit together; the distance from idea to production is measured in days. Emphasis on shipping production software, not just research. - **Notable Perks**: 12-week AI Fellowship for graduate researchers and early-career ML engineers; team hails from top companies like Coinbase, Databricks, AWS, Zscaler, and HashiCorp. [cogent.com/company/careers](https://www.cogent.com/company/careers) - **Growth Opportunity**: Rapidly scaling startup with significant funding, strong customer traction, and a mission-driven focus on one of cybersecurity’s hardest problems. ## Sources 1. [cogent.com](https://www.cogent.com/) – Company overview, product details, customer testimonials 2. [cogent.com/about-us](https://www.cogent.com/about-us) – Founders, mission, team background 3. [cogent.com/company/careers](https://www.cogent.com/company/careers) – Culture, remote policy, AI Fellowship, values 4. [linkedin.com/company/cogentsecurity](https://www.linkedin.com/company/cogentsecurity) – Employee count, funding, office locations, job postings 5. [jobs.ashbyhq.com/cogent-security](https://jobs.ashbyhq.com/cogent-security) – Active job openings 6. Pulse 2.0 (2025-07-16) – “Cogent Security: $11 Million Raised For AI Taskforce For Vulnerability Management” 7. FinSMEs (2025-07-15) – “Cogent Security Raises $11M in Funding” ## Other roles at Cogent Security - [Senior GTM Recruiter](https://feeny.ai/job/senior-gtm-recruiter-cogent-security-new-york-tt04axvg8dzt) — New York, NY - [Senior Manager, Content Marketing](https://feeny.ai/job/senior-manager-content-marketing-cogent-security-united-states-sgpqyv6heyst) — United States - [Director of Content Marketing](https://feeny.ai/job/director-of-content-marketing-cogent-security-united-states-gvwx7echta8g) — United States - [Director of Communications](https://feeny.ai/job/director-of-communications-cogent-security-united-states-fmar3f4nr8w7) — United States - [Sr. Product Marketing Manager](https://feeny.ai/job/sr-product-marketing-manager-cogent-security-united-states-devbqntbcz5s) — United States - [Field Marketing Manager, West](https://feeny.ai/job/field-marketing-manager-west-cogent-security-san-francisco-stzksc9pb3sh) — San Francisco, CA - [Revenue Operations Lead, West](https://feeny.ai/job/revenue-operations-lead-west-cogent-security-san-francisco-egnn7dbg9v2b) — San Francisco, CA - [Revenue Operations Lead, Central](https://feeny.ai/job/revenue-operations-lead-central-cogent-security-san-francisco-8s9gm8qg0bg3) — San Francisco, CA - [Technical Support Engineer](https://feeny.ai/job/technical-support-engineer-cogent-security-san-francisco-rd4rv7xkwnk6) — San Francisco, CA - [Executive Assistant to the CEO](https://feeny.ai/job/executive-assistant-to-the-ceo-cogent-security-san-francisco-76yt0apnv94e) — San Francisco, CA