407,354open jobs
14,154companies
73,129added this week
Browse all
Salary
$78k – $174k per year (Estimated)
Location
Remote (United States)
Seniority
Middle · 4+ years exp
Employment
Freelance
Overview
Company
Impact
Profile match
Cobalt runs penetration testing as a service, matching customers with a vetted community of security researchers. Tests are scheduled through a platform that tracks findings, retests fixes and produces the reports auditors ask for. The model suits companies that need recurring assessments rather than one annual engagement.

Who We Are

The Cobalt Core is a community of highly skilled security pentesters who are passionate about what they do and strive to deliver quality work. This curated community is made up of security professionals with years of experience as well as talented pentesters who are eager to hone their trade and showcase their skills. They all have a strong drive to keep up-to-date on the latest vulnerabilities and exploits, and the tools and methodologies to find them. 

Cobalt Core members believe that sharing ideas and collaborating with peers is the best way to achieve great results. 

If you believe you would be a good fit to join the Cobalt Core, and are eager to contribute to the community and participate in the pentests running on the Cobalt platform, please apply.

If you are currently residing outside of the USA, please apply here.

Who You Are

  • Based in the USA
  • Minimum of 4+ yearsof Pentesting or similar experience (mid-level)
  • Professional demeanor
  • Respectful towards others
  • Take pride in the work you produce
  • Strong work ethic with attention to detail
  • Desire to be an expert within your field
  • Deep understanding of application security
  • Ability to communicate effectively
  • Collaborative spirit

What You'll Do

  • Perform manual penetration testing of web applications, APIs, internal and external networks, iOS and Android mobile applications
  • Work as a member of a pentest team, collaborating and engaging directly with the client
  • Document in detail the results of assessments, audits, tests, and verification activities
  • Perform manual validation of vulnerabilities
  • Perform mobile and web app pentesting for OWASP top 10 vulnerabilities.
  • The following certifications are a plus:
    • CREST, PenTest+, GPEN, CEH, OSCP, AWS, CISSP, eCPPT, eWAPT, OSCE, OSWE
  • Please note that this is a freelance, part-time position available only to Pentesters residing within the USA.

Why You Should Join Us

  • Work with and learn from other highly skilled security researchers
  • Get to work on many different interesting projects and applications
  • Flexible work hours
  • Make the internet more secure - one application at a time
  • Professional and career development
  • Get compensated for your time and effort

Application Process

  • Application - Becoming part of the Cobalt Core is a highly selective process, and only the best applicants will be invited to next steps in the on boarding process. Preference will be given to applicants who come referred by other Cobalt Core pentesters. 
  • Chat with a Cobalt representative - Get to know about Cobalt and how we work. We will also want to know about you, your experience, strengths and what drives you. If we all think it's a great fit, we will explore how we can work together!
  • Technical Skills Assessment to demonstrate your technical acumen and reporting. 
  • Getting setup on the Cobalt platform + Background Check & ID Verification - In this step we will make sure you are all set up for success, and we will also ask you to pass a Background Check & ID Verification.
  • Start working on cool projects!

Applicants need apply only once, applications are reviewed on a rolling basis.

Please note that this is a freelance, part-time position available only to Pentesters residing within the USA.  Applicants outside of the US will not be considered if you apply through this job posting. 

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
407,354 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Similar stack
Same company
In your city
In office • 4+ years exp • Bachelor's Degree
Python
AI/ML
AI Agents
Amazon SageMaker
Anthropic
AWS Bedrock
Claude
Claude Code
Copilot
Cursor
EU AI Act
Function Calling
Gemini
Human-in-the-Loop
Llama
LLM
LLM Evaluation
LLM Guardrails
Mistral
Model Context Protocol
NIST AI RMF
OpenAI
Prompt Engineering
RAG
DevOps
AWS
Azure
CI/CD
GCP
GitHub
Cybersecurity
OWASP Top 10
Management
ServiceNow
Apply
$139k – $345k per year (Estimated) • Equity • In office • 15+ years exp • Master's Degree • Palo Alto
Databases
Databricks
Snowflake
AI/ML
AI Agents
LLM Guardrails
NIST AI RMF
Mobile
Algolia
DevOps
CI/CD
GCP
SLI/SLO/SLA
Cybersecurity
Carbon Black
Crowdstrike
ISO 27001
NIST CSF
Okta
OWASP Top 10
SentinelOne
Management
Obsidian
Apply
In office • Full-Time • 5+ years exp
C#
Python
SQL
TypeScript
Databases
Azure SQL Database
DevOps
Azure
CI/CD
Docker
GitHub
GitHub Actions
Cybersecurity
OWASP Top 10
QA
Playwright
Postman
Apply
$132k – $238k per year • Remote/Hybrid • Full-Time • 7+ years exp • Brooklyn Park
AI/ML
LLM
LLM Guardrails
Model Context Protocol
RAG
Vertex AI
DevOps
AWS
Azure
GCP
IAM
Cybersecurity
OWASP Top 10
Threat Modeling
Apply
$50k – $80k per year • In office • 7+ years exp • Bachelor's Degree • Toronto
Java
Python
SQL
Java
Maven
Spring Boot
Databases
Apache Kafka
Kafka
PostgreSQL
Redpanda
AI/ML
Flink
Mobile
JUnit
DevOps
ArgoCD
AWS
Azure
CI/CD
GCP
Git
Kubernetes
Rest API
Cybersecurity
OWASP Top 10
Analytics
ETL/ELT
Management
Jira
Apply
$80k – $100k per year • Remote • Contractor • 3+ years exp • Bachelor's Degree
Management
Confluence
Apply
$250k – $275k per year • Equity • Remote • 5+ years exp • Bachelor's Degree
JavaScript
Node JS
Ruby
C
Ruby
Ruby on Rails
C
SDL
AI/ML
Claude
Claude Code
Copilot
Frontend
React.js
DevOps
GCP
GitHub
Kubernetes
Apply
$168k – $212k per year • Remote • Contractor • 8+ years exp • PhD
Apply
$125k – $160k per year • Equity • Remote • Internship • 7+ years exp • PhD
Marketing
HubSpot
Salesforce
Apply
$135k – $160k per year • Equity • Remote • Internship • 7+ years exp • PhD
JavaScript
Python
SQL
TypeScript
Management
n8n
Zapier
Apply
See all jobs
This is one of many
407,354 more open roles from verified company boards, updated every day.