Cohere
Product Security Engineer, North Security
Toronto · Full-time
Sponsorship not specifiedDetected 35 days ago
PythonGoCloud PlatformsKubernetesCI/CDOAuthAgentic AICybersecurityPenetration TestingResearchCommunication
Stay score
odds of building a lasting career here
39Risky
Cap-exempt (no lottery)0
Sponsors this role88
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Cohere is the leading security-first enterprise AI company.
- Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
- WHY THIS ROLE Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong.
Responsibilities
- Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them.
- Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
- Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.
- Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.
- You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks.
- Lead security reviews.
- Identify both individual vulnerabilities and the recurring design patterns behind them.
- We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
- We're training and deploying frontier models for enterprises who are building AI systems.
- We obsess over what we build.
Requirements
- You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries.
- Direct experience with agentic AI systems is valuable but not required.
- You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases.
- You are proficient in at least one of Python, Go, or TypeScript.
- You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority.
Nice to have
- Experience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data.
- Offensive security experience through penetration testing, red teaming or security research.
- Experience operating or participating in a vulnerability disclosure or bug bounty program.
- Contributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- If any of the above doesn't line up exactly with your experience, we still encourage you to apply.
- we welcome applicants from all backgrounds and are committed to providing equal opportunities.
- We may use AI-enabled tools to screen and assess applicants against the criteria for this position.
Skills
- Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong.
Compensation
- Annual enrichment
Benefits
- 6 weeks of paid vacation (30 working days!)
- Everyone receives a $500 home office stipend to set up your workspace properly.
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
- Education & learning stipend for conferences, courses, and coaching.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
Company info
- We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
- We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul.
- Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process.
- Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers.
This listing is sourced directly from Cohere's careers page and normalized into a canonical job model.