Senior Security Engineer at Cohere

Role overview

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.

We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.

We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.

We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!

As a Senior Security Engineer you will:

Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues

Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments

Integrate security into our applications throughout the software development lifecycle

Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed

Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing

Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions

Gather and analyze security metrics to address security issues with cross-team dependencies

Responsibilities

• Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
• Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments
• Integrate security into our applications throughout the software development lifecycle
• Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed
• Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing
• Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions
• Gather and analyze security metrics to address security issues with cross-team dependencies
• Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions

Qualifications

• You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security
• You are comfortable with ambiguity and are able to make informed decisions with little data
• You employ a flexible and constructive approach when solving problems
• You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available
• You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
• You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
• You’re a hands-on security engineer interested in automating controls
• Full-Time Employees at Cohere enjoy these Perks:
• A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
• Full health and dental benefits, including a separate budget for mental health.
• RRSP matching, 401K, Pension Scheme.
• 100% Parental Leave top-up for up to 6 months, for either parent.
• Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
• 6 weeks of paid vacation (30 working days!)
• Budget for traveling to other offices if you are remote, plus an annual company offsite.
• Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.

Technology in this role

• CI/CD: Join us! As a Senior Security Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Lead security operation functions – including vulnerability management, SAST, DAST, detection .
• CAN: buy decisions - help build solutions and able to review what tools are available You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences You have a deep technical .
• SAST: Join us! As a Senior Security Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Lead security operation functions – including vulnerability management, SAST, DAST, detection .
• DAST: Join us! As a Senior Security Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Lead security operation functions – including vulnerability management, SAST, DAST, detection .

Benefits

• A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
• Full health and dental benefits, including a separate budget for mental health.
• RRSP matching, 401K, Pension Scheme.
• 100% Parental Leave top-up for up to 6 months, for either parent.
• Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.

About Cohere

North is Cohere's cutting-edge AI workspace platform, designed to revolutionize the way enterprises utilize AI. It offers a secure and customizable environment, allowing companies to deploy AI while maintaining control over sensitive data. North integrates seamlessly with existing workflows, providing a trusted platform that connects AI agents with workplace tools and applications.

This role offers a unique opportunity to shape how enterprises harness the power of AI in real-world applications. As a bridge between our core North product and our clients’ engineering teams, you’ll be at the forefront of solving complex problems and securely integrating AI into critical sectors such as finance, healthcare, and telecommunications.

We’re looking for Software Engineers with Applied AI experience who can own the design, build, and deployment of agentic workflows powered by Large Language Models (LLMs), from early prototypes to production-grade AI agents, to deliver concrete business value in enterprise workflows. You’ll work closely with customers on real-world business problems, often building first-of-their-kind agent workflows that integrate LLMs with tools, APIs, and data sources. While our pace is startup-fast, the bar is enterprise-high: agents must be reliable, observable, safe, and auditable from day one.

Note: between 20 - 40% travel anticipated.

Work closely with our enterprise customers to translate high-value, ambiguous business problems into well-framed agentic workflows with clear success criteria and evaluation methodologies

Lead the design, build, and delivery of LLM-powered agents that reason, plan, and act across tools, APIs, and sensitive enterprise data sources, with enterprise-grade reliability and performance

Related jobs

• Corporate Security Lead, DLP and EDR — Money Forward Vietnam
• Senior Software Engineer, Code Security at GitLab — GitLab
• Staff Software Engineer, Static Analysis at GitLab — GitLab
• Lead Security Engineer, Red Team and Threat Intelligence at Grab — Grab
• Security Engineer at Deepgram — Deepgram
• Senior Security Engineer, Offensive Security at Docker — Docker