C

Cowbell Cyber

AI-powered cyber insurance for SMEs

Security Research Engineer

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timePune, Maharashtra, IndiaNo salary listedIn-person

About the Job

Requirements

  • At least 5 years of experience in application security, vulnerability research, or offensive security.
  • A bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.
  • Strong knowledge of secure development practices, manual security assessments, and source code reviews.
  • Deep understanding of the OWASP Top 10, API Security Top 10, modern web application architectures, secure authentication and authorization models, and cloud security fundamentals.
  • Proficiency with one or more programming languages: Python, Java, JavaScript, or TypeScript.
  • Strong understanding of Linux, networking, and web protocols, and experience using common security testing tools.

Responsibilities

  • Conduct in-depth security assessments and manual penetration testing of web applications, APIs, and cloud services.
  • Perform source code reviews and analyze proprietary applications for flaws such as injection, authorization issues, business logic abuse, and misconfigurations.
  • Develop custom tooling and proof-of-concept exploits to validate findings.
  • Research emerging attack techniques, exploit chains, and zero-day vulnerabilities in internal applications and supporting systems.
  • Conduct threat modeling and evaluate software supply chain and dependency risks.
  • Partner with engineering teams throughout the software development lifecycle to provide secure coding guidance, support architecture reviews, integrate security testing into continuous integration and continuous delivery pipelines, and contribute to internal security standards.
  • Document vulnerabilities, exploitability, and remediation guidance in clear reports; present findings to stakeholders, track remediation efforts, and verify fixes.
  • Identify and validate critical and high-risk vulnerabilities before production impact.
  • Improve application security posture through proactive research and testing.
  • Reduce vulnerability remediation timelines through effective collaboration.
  • Develop repeatable testing methodologies and security automation.
  • Contribute meaningful research into emerging threats.

Desired Qualifications

  • Experience discovering novel vulnerabilities, participating in bug bounty or disclosure programs, or a background in exploit development or reverse engineering.
  • Knowledge of modern cloud environments such as AWS, Azure, or GCP; container security or Kubernetes; and building custom security tooling.
  • Experience with current vulnerability research tools such as Burp Suite, Nuclei, or Ghidra.
  • Public vulnerability research, conference presentations, blog posts, or published CVEs.
  • One or more of the following certifications: OSCP, OSWE, OSEP, GXPN, or relevant GIAC certifications.

About the Company

Cowbell Cyber

AI-powered cyber insurance for SMEs

Cowbell.insure provides cybersecurity insurance for SMEs. It uses AI, data, and a closed-loop risk management system to continuously assess risk and underwrite policies, making risk exposure clear through Cowbell Factors. Cowbell Insights offers ongoing risk assessments and recommendations, managed by the Cowbell Risk Engineering team. Post-incident recovery services connect security and insurance experts for immediate help, all designed to help SMEs understand, manage, and insure cyber risks as threats evolve.

Company size
201-500
Company stage
Series C
Total funding
$208.3M
Headquarters
Pleasanton, CA
Founded
2019

Recently Posted Jobs

Explore more opportunities at Cowbell Cyber

See more jobs