Senior Security Engineer
Toronto-founded enterprise AI company building foundation models, agentic AI, enterprise search, and private deployment products.
About Cohere
Cohere provides enterprise-focused AI models and end-to-end products, including North for agentic workplace AI, Compass for enterprise search, and models for generation and retrieval. It supports private, VPC, and on-premises deployment options.
Skills
About the Role
You will lead security operations across cloud-native production environments, including vulnerability management, SAST, DAST, detection engineering, and incident response. You will integrate security throughout the development lifecycle, partner with product and development stakeholders, support bug bounty and security reviews, perform threat modeling, evaluate security tooling, and use metrics to resolve cross-functional security issues.
Requirements
- 5+ years of application security, product security, or security operations experience focused on security-tool onboarding and optimization
- Understanding of vulnerability management, network security, cloud security, and security best practices
- Understanding of secure-engineering best practices, common security vulnerabilities and risks, countermeasures, and compensating controls
- Ability to evaluate build-versus-buy security tooling decisions
- Hands-on security-engineering experience automating controls
Responsibilities
- Advise leadership and partner stakeholders on business risks associated with security issues
- Lead vulnerability management, SAST, DAST, detection engineering, and incident response in CI/CD and cloud-native production environments
- Integrate security throughout the software development lifecycle
- Collaborate with product and development stakeholders to ensure secure software delivery
- Support the bug bounty program, application-security reviews, threat modeling, code review, and dynamic testing
- Evaluate and integrate security tools to automate and scale security processes
- Gather and analyze security metrics to address cross-team security issues
- Build innovative security solutions that address developer concerns
Benefits
- Equity
- Weekly lunch stipend of $75/£75 or local-currency equivalent
- Health and dental benefits
- Mental-health budget
- RRSP matching, 401K, and pension scheme
- 100% parental-leave top-up for up to six months
- Annual enrichment benefits for arts and culture, fitness and wellness, quality time, and workspace improvement
- Six weeks of paid vacation
- Travel budget for other offices and an annual company offsite
- Daily lunch, snacks, and community events for office-based employees
- Co-working benefit for employees not near an office
- $500 home-office stipend