Senior Security Engineer

About Cohere

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products designed to solve real-world business problems. We train and deploy frontier models for enterprises building AI systems. Our work is instrumental to the widespread adoption of AI, and we are looking for individuals passionate about contributing to this mission.

Cohere is a global team of researchers, engineers, designers, and more, headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin, and Seoul.

Responsibilities

• Serve as a trusted advisor to team leadership and partner teams by clearly articulating business risks associated with security issues.
• Lead security operation functions—including vulnerability management, SAST, DAST, detection engineering, and incident response—in CI/CD and cloud-native production environments.
• Integrate security into our applications throughout the software development lifecycle.
• Collaborate with product and development teams to ensure software is built and deployed securely without compromising agility and speed.
• Drive and support the bug bounty program, application security reviews, and threat modeling, including code review and dynamic testing.
• Assess and integrate security tools to automate and scale security processes, evaluating open-source vs. vendor solutions.
• Gather and analyze security metrics to address security issues with cross-team dependencies.
• Be a problem solver who is empathetic to developer concerns and employs a constructive, flexible approach to building innovative solutions.

Qualifications

• 5+ years of previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization.
• Understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security.
• Comfort with ambiguity and ability to make informed decisions with limited data.
• Flexible and constructive approach to problem-solving.
• Ability to make trade-offs between build vs. buy decisions—help build solutions and review available tools.
• Understanding of secure engineering best practices, with the ability to articulate problem statements and propose solutions to both technical and non-technical audiences.
• Deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls.
• Hands-on security engineering interest in automating controls.

Benefits

• A weekly lunch stipend of $75/£75 or equivalent in your local currency.
• Full health and dental benefits, including a separate budget for mental health.
• RRSP matching, 401K, or Pension Scheme.
• 100% Parental Leave top-up for up to 6 months for either parent.
• Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
• Education & learning stipend for conferences, courses, and coaching.
• 6 weeks of paid vacation (30 working days).
• Budget for traveling to other offices if remote, plus an annual company offsite.
• $500 home office stipend to set up your workspace.
• Co-working benefit for remote employees to work alongside others in their city.

Schedule

This is a full-time position.

Work Arrangements

Cohere is remote-friendly with offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin, and Seoul. For office-based employees: daily lunch programs, snacks, and regular community events. For remote employees: a co-working benefit and a home office stipend.