Senior Security Engineer
cohere
Job Score
100 ptsWho are we?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
As a Senior Security Engineer you will:
Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments
Integrate security into our applications throughout the software development lifecycle
Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed
Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing
Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions
Gather and analyze security metrics to address security issues with cross-team dependencies
Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions
You may be a good fit if:
5+ years previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization
You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security
You are comfortable with ambiguity and are able to make informed decisions with little data
You employ a flexible and constructive approach when solving problems
You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available
You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences
You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls
You’re a hands-on security engineer interested in automating controls
Full-Time Employees at Cohere enjoy these Perks:
A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
Full health and dental benefits, including a separate budget for mental health.
RRSP matching, 401K, Pension Scheme.
100% Parental Leave top-up for up to 6 months, for either parent.
Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
6 weeks of paid vacation (30 working days!)
Budget for traveling to other offices if you are remote, plus an annual company offsite.
How and Where We Work:
Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
For those not near an office: a co-working benefit so you can work alongside others in your city.
Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers page.
About Information Security
The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.
Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.
Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.
Discover Other Areas
Understand the scope of work, key skills, and tools used in different career areas.
About Automation Analyst
The Automation Analyst is the professional responsible for identifying process optimization opportunities and developing automated workflows (RPA, scripts, or integrations). They map manual and repetitive tasks across various company areas and build automation solutions using low-code/no-code platforms (such as Zapier, Make, Power Automate, n8n) or RPA tools (such as UiPath), driving operational efficiency and error reduction.
About Data
The Data field has undergone a radical transformation with the rise of Generative AI. Data professionals are fundamental for evidence-based decision-making across all industries.
Key specializations include Data Engineering, Data Science, Business Intelligence, Machine Learning Engineering, and Analytics. Tools like SQL, Python, Spark, dbt, and cloud platforms (AWS, GCP, Azure) are essential.
The data market continues with high demand and salaries among the most competitive in the technology sector, with many remote work opportunities.
About Project Management
Project Management is essential to ensure strategic initiatives are delivered on time, within scope, and with quality. PM professionals coordinate teams, manage risks, and communicate with stakeholders.
Key methodologies include PMBOK, PRINCE2, Scrum, and Kanban. Tools like Jira, Asana, Monday, and MS Project are widely used in daily work.
Certifications like PMP and PgMP are important differentiators in the market, with growing demand in technology and consulting companies.
About Project Manager
The Project Manager is the professional responsible for planning, executing, and controlling projects end-to-end, ensuring they are delivered on time, within budget, and with the expected quality. With the growing complexity of businesses, project management professionals are fundamental to organizational success.
Key skills include planning and scheduling, scope, cost, risk, quality, and resource management, stakeholder communication, cross-functional team leadership, and use of agile and traditional methodologies. Certifications like PMP, PRINCE2, and Six Sigma are important differentiators.
Project Managers in technology companies are highly valued, especially those who master agile methodologies (Scrum, Kanban), tools like Jira and MS Project, and can deliver complex projects efficiently. The field offers opportunities from project analyst to head of PMO, with a focus on execution, governance, and business value.
About Content Writer
The Content Writer is the professional responsible for creating quality written content for websites, blogs, social media, and other digital platforms. They combine writing skills with content strategy and SEO to attract, engage, and convert audiences.
Key skills include blog content creation, landing pages, newsletters, social media content, keyword research, content strategy, editorial calendar, and SEO writing. Knowledge of WordPress, Surfer SEO, Ahrefs, and analytics tools is a differentiator.
Content Writers in technology companies are highly valued, especially those who can create accessible technical content, evergreen content, and content that generates organic traffic. The field offers opportunities from junior content writer to head of content, with a focus on quality, strategy, and content performance.
Comments 0