← All roles

Manager, Security Engineering

Cohere· Security
Apply on company site
United States, CanadaCA$320k - CA$385kFull-timePosted 4mo ago

About the role

Leadership role overseeing security engineering initiatives, including vulnerability management, SAST/DAST, penetration testing, security architecture, and secure SDLC within Cohere’s product and business context.

Responsibilities

  • Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
  • Execute the long-term vision for the Security team in alignment with Cohere’s product and business goals.
  • Collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements.
  • Vulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifacts
  • Static Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source code
  • Dynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applications
  • Penetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program
  • Security Architecture Review: Collaborate with development teams to review and validate security architecture and design patterns
  • Secure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teams
  • Team Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorship
  • Metrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholders
  • Compliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirements

Qualifications

  • 8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programs
  • Proven experience with SAST, DAST, and penetration testing methodologies and tools
  • Proficiency with programming languages (Python, GoLang, etc.) and web technologies
  • Experience with cloud platforms (AWS, GCP, Azure) and container security
  • Excellent communication and interpersonal skills with ability to influence technical and non-technical stakeholders
  • Experience building and managing high-performing security teams
  • Comfort with ambiguity and ability to make informed decisions with little data
  • Flexible and constructive approach when solving problems
  • Ability to make trade-offs between build vs. buy decisions—assist in building solutions and review available tools
  • Understanding of secure engineering best practices, problem statements, and ability to translate for technical and non-technical audiences
  • Deep technical understanding of common security vulnerabilities, risks, countermeasures, and compensating controls

Skills

Required:Security leadershipVulnerability managementSASTDASTPenetration testingSecurity architecture

Benefits

  • A weekly lunch stipend of $75/£75 or equivalent in local currency
  • Full health and dental benefits, including a separate budget for mental health
  • RRSP matching, 401K, Pension Scheme
  • 100% Parental Leave top-up for up to 6 months, for either parent
  • Annual enrichment benefits: arts & culture, fitness/wellness, quality time, and workspace improvement credit
  • Education & learning stipend for conferences, courses, and coaching
  • 6 weeks of paid vacation (30 working days)
  • Budget for traveling to other offices if remote, plus an annual company offsite
Last updated Oct 21, 2026. Interested? Apply on the company site.
Cohere logo

About Cohere

Support automation that's actually intelligent

Cohere resolves 40-70% of support requests using AI, over all channels, within just a few days.

artificial-intelligenceautomationliquid-ai-recruiting-target
Company profileWebsite

More open roles at Cohere