Cogent Security develops autonomous AI agents that automatically investigate and remediate software vulnerabilities for large enterprises.
ABOUT COGENT Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity. AI has fundamentally changed how attacks happen, allowing malicious actors to operate at unprecedented speed and scale. Cogent’s "AI Taskforce" assesses petabytes of enterprise data to remediate these issues before critical breaches occur. To stay at the cutting edge, we blend frontier research with real-world execution. Alongside our core product work, Cogent Research serves as our applied AI lab, providing the research horsepower needed to make truly agentic security workflows a reality. We partner with Fortune 500 companies to secure some of the most complex production environments in the world. We’re backed by Greylock & Bain Capital Ventures, and we’ve built a team with the best minds in applied AI. Our team is comprised of people from: - Top universities like Stanford, Berkeley, Penn, Duke, Carnegie Mellon, Waterloo - Unicorn, high-growth companies like Scale AI, Databricks, Stripe, Tesla, Coinbase - World class cybersecurity experts from Wiz, Abnormal AI, Zscaler - Preeminent research labs like Deepmind and SAIL ABOUT THE ROLE We're hiring a Senior Security Engineer, Corporate Security to own the security of our internal systems, endpoints, and enterprise tooling. You'll harden the systems our team relies on every day: laptops, identity, SaaS, the corporate environment - and build the controls and automation that keep us safe as we grow. Ultimately you’ll be responsible for securing our workflows and the systems that run the company. WHAT YOU’LL DO - Harden and manage endpoints across the fleet (macOS, and others as needed): baseline hardening, device posture, EDR coverage and tuning - Own corporate identity and access: SSO/MFA, least-privilege access, and identity hygiene across our SaaS stack - Secure and standardize our enterprise systems and SaaS environment; drive Zero Trust / device-trust patterns - Build automation and tooling to enforce security configuration and scale controls without slowing the team down - Handle enterprise security operations - detection, monitoring, and response for corporate systems - Serve as the internal security SME on corporate systems and workflow decisions, and as an early user of what we build WHAT WE'RE LOOKING FOR: - 5+ years of experience building and managing corporate security / IT security programs - Strong hands-on engineer who produces vs. just manages process - Deep experience hardening endpoints and enterprise systems, with solid OS internals knowledge (macOS, Windows, Linux) - Experience across CorpSec domains: endpoint security, corporate identity, SaaS security, device trust, Zero Trust - Automation ability to build and maintain tooling (e.g. Python, or similar) - you look for smart and secure ways to automate your work to scale yourself - Able to flex up and down: strategic when it matters, in the weeds when it counts - Comfortable being an early security hire at a startup - high ownership, ambiguity, and direct impact BONUS POINTS - Experience standing up a CorpSec function or building enterprise security from an early stage, 0-1 - Familiarity with compliance frameworks (e.g. SOC 2) and supporting audits - DLP, secrets management, or corporate network security experience - Using AI coding tools and agentic workflows daily to move faster and automate more of your own work FOR CALIFORNIA BASED APPLICANTS The standard base salary range for this position is $100,000 - $300,000 annually. Compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits. We are committed to building an inclusive and diverse company. We do not discriminate based on gender, ethnicity, sexual orientation, religion, civil or family status, age, disability, or race.