Software Engineer Security
Toronto-founded enterprise AI company building foundation models, agentic AI, enterprise search, and private deployment products.
About Cohere
Cohere provides enterprise-focused AI models and end-to-end products, including North for agentic workplace AI, Compass for enterprise search, and models for generation and retrieval. It supports private, VPC, and on-premises deployment options.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build and secure production features, including OIDC/OAuth flows, session management, authentication, token management, authorization checks, and data protection. You will implement secret management in Kubernetes, use encryption and RBAC, integrate security tools, and communicate security practices to stakeholders.
Requirements
- 5+ years building user-facing production security features
- Python
- OIDC/OAuth 2.0
- JWT validation
- Token lifecycle management
- Kubernetes
- GCP, AWS, Azure, or hybrid/multi-cloud experience
- Full-stack development
- AI/ML or LLM application experience
Responsibilities
- Develop production security features
- Write secure code for OIDC tokens, user claims, and sensitive data
- Implement authentication, token management, and authorization checks
- Integrate tools that improve security capabilities
- Design and implement Kubernetes secret management, encryption, and RBAC
- Communicate security practices to stakeholders
Benefits
- Weekly lunch stipend of $75/£75 or local-currency equivalent
- Health and dental benefits
- Mental-health budget
- RRSP matching, 401K, and Pension Scheme
- 100% parental-leave top-up for up to 6 months
- Annual enrichment benefits
- Education and learning stipend
- 6 weeks of paid vacation
- Remote-office travel budget
- Annual company offsite
- Co-working benefit
- $500 home-office stipend