Security Research Engineer

About the role

Championing adaptive insurance, Cowbell follows policyholders’ cyber risk exposures as they evolve through continuous risk assessment and continuous underwriting. In its unique AI-based approach to risk selection and pricing, Cowbell’s underwriting platform, powered by Cowbell Factors, compresses the insurance process from submission to issue to less than 5 minutes.

What you'll do

• Perform source code reviews and analyze proprietary applications for flaws (e.g., injection, authorization issues, business logic abuse, misconfigurations)
• Develop custom tooling and Proof-of-Concept (POC) exploits to validate findings
• Conduct threat modeling and evaluate software supply chain and dependency risks
• Contribute to internal security standards
• Reporting: Document vulnerabilities, exploitability, and remediation guidance in clear reports. Present findings to stakeholders, track remediation efforts

What you need

• 5–9 yrs of experience
• Research
• Linux
• OWASP
• Cloud security
• Python
• Networking
• B.Sc or B.Tech or B.E. or BCA

Good to have

• AWS
• GCP
• Azure
• Kubernetes
• Java
• JavaScript