{"id":69818,"url":"https://alion.io/job/cowbell-security-research-engineer","title":"Security Research Engineer","company":{"id":41986,"name":"Cowbell","domain":"cowbell.insure","url":"https://alion.io/company/cowbell","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"AI/ML","role_family":"AI/ML","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":45000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":27},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Burp Suite","optional":true},{"name":"GCP","optional":true},{"name":"Ghidra","optional":true},{"name":"Kubernetes","optional":true},{"name":"Nuclei","optional":true}],"status":"live","first_seen_at":"2026-07-16T09:32:22Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-11T23:37:58Z","board_verified":true,"closed_at":null,"days_open":87,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":86},"description":"Cowbell is signalling a new era in cyber insurance by harnessing technology and data to provide small and medium-sized enterprises (SMEs) with advanced warning of cyber risk exposures bundled with cyber insurance coverage adaptable to the threats of today and tomorrow. Championing adaptive insurance, Cowbell follows policyholders’ cyber risk exposures as they evolve through continuous risk assessment and continuous underwriting. In its unique AI-based approach to risk selection and pricing, Cowbell’s underwriting platform, powered by Cowbell Factors, compresses the insurance process from submission to issue to less than 5 minutes.\nFounded in 2019 and based in the San Francisco Bay Area, Cowbell has rapidly grown, now operating across the U.S., Canada, U.K., and India. This growth was recently bolstered by a successful Series C fundraising round of $60 million from Zurich Insurance. This investment not only underscores the confidence in Cowbell’s mission but also accelerates our capacity to revolutionize cyber insurance on a global scale. With the backing of over 25 prominent reinsurance partners, Cowbell is poised to redefine how SMEs navigate the evolving landscape of cyber threats.\nCowbell Cyber is hiring a Cyber Security Researcher to join our Data Science team. \nKey Responsibilities\n Security Research & Testing: Conduct in-depth security assessments and manual penetration testing of web apps, APIs, and cloud services. Perform source code reviews and analyze proprietary applications for flaws (e.g., injection, authorization issues, business logic abuse, misconfigurations). Develop custom tooling and Proof-of-Concept (POC) exploits to validate findings.\nVulnerability Discovery: Research emerging attack techniques, exploit chains, and zero-day vulnerabilities in internal applications and supporting systems. Conduct threat modeling and evaluate software supply chain and dependency risks.\nEngineering Collaboration: Partner with engineering teams throughout the SDLC to provide secure coding guidance, support architecture reviews, and integrate security testing into CI/CD pipelines. Contribute to internal security standards.\nReporting: Document vulnerabilities, exploitability, and remediation guidance in clear reports. Present findings to stakeholders, track remediation efforts, and verify fixes.\n\nRequired Qualifications\n5+ years of experience in application security, vulnerability research, or offensive security.\nBachelor's degree in Computer Science, Cybersecurity, Software Engineering, or equivalent practical experience.\nStrong knowledge of secure development practices, manual security assessments, and source code reviews.\nDeep understanding of: OWASP Top 10, API Security Top 10, modern web application architectures, secure authentication and authorization models, and cloud security fundamentals.\nProficiency with one or more programming languages (Python, Java, JavaScript/TypeScript).\nStrong understanding of Linux, networking, and web protocols; experience using common security testing tools.Preferred Qualifications\nExperience discovering novel vulnerabilities, participating in bug bounty/disclosure programs, or background in exploit development/reverse engineering.\nKnowledge of modern cloud environments (AWS, Azure, GCP), container security/Kubernetes, and building custom security tooling.\nExperience with current vulnerability research tools ( i.e. Burp Suite, Nuclei, Ghidra).\nPublic vulnerability research, conference presentations, blog posts, or published CVEs.\nPreferred Certifications\nOne or more of the following:\nOSCP\nOSWE\nOSEP\nGXPN\nRelevant GIAC certifications\nSuccess Metrics (Within the first 12 months)\nIdentify and validate critical and high-risk vulnerabilities before production impact.\nImprove application security posture through proactive research and testing.\nReduce vulnerability remediation timelines through effective collaboration.\nDevelop repeatable testing methodologies and security automation.\nContribute meaningful research into emerging threats.\n\nEqual Employment Opportunity:\nWe are committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability, or veteran status.\nCowbell is a leading innovator in cyber insurance, dedicated to empowering businesses to always deliver their intended outcomes as the cyber threat landscape evolves. Guided by our core values of TRUE-Transparency, Resiliency, Urgency, and Empowerment-we are on a mission to be the gold standard for businesses to understand, manage, and transfer cyber risk.\nAt Cowbell, we foster a collaborative and dynamic work environment where every employee is empowered to contribute and grow. We pride ourselves on our commitment to transparency and resilience, ensuring that we not only meet but exceed industry standards.\nWe are proud to be an equal opportunity employer, promoting a diverse and inclusive workplace where all voices are heard and valued. Our employees enjoy competitive compensation, comprehensive benefits, and continuous opportunities for professional development.\nCowbell is an E-Verify employer. E-Verify is a web-based system that allows an employer to determine an employee's eligibility to work in the US using information reported on an employee's Form I-9. The E-Verify system confirms eligibility with both the Social Security Administration (SSA) and Department of Homeland Security (DHS). For more information, please go to the USCIS E-Verify website.\nFor more information, please visit https://cowbell.insure/.\nCowbell Cyber does not permit the use of AI tools during any stage of our interview process. By submitting your application, you agree to complete all assessments and interviews without the use of generative AI assistance.","description_format":"text","description_chars":5899,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Insurance coverage","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-07-16T09:32:22Z"},{"event":"close","at":"2026-08-24T16:41:18Z"},{"event":"reopen","at":"2026-09-25T22:26:52Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.683,"p_room":0.36,"age_days":85,"expected_fill_days":45,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/cowbell-security-research-engineer","json_url":"https://alion.io/job/cowbell-security-research-engineer.json","meta":{"generated_at":"2026-10-12T01:05:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1086,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":41986},"rest":"https://alion.io/mcp/rest/get_company?id=41986"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcowbell-security-research-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcowbell-security-research-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcowbell-security-research-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cowbell-security-research-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcowbell-security-research-engineer"}]}