← All roles

Product Security Engineer, North Security

Cohere· Engineering & Infra
Apply on company site
RemoteCA$230k - CA$330kFull-timePosted 1mo ago

About the role

Senior Product Security Engineer focused on securing Cohere's AI-powered products, leading security reviews, threat modeling, hands-on testing, and building scalable guardrails in a remote-first environment.

Responsibilities

  • Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them.
  • Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.
  • Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations.
  • Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
  • Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.
  • Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.
  • Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives.

Qualifications

  • You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases.
  • Proficient in at least one of Python, Go, or TypeScript.
  • You have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted.
  • You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks.
  • You understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems.
  • You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries. Direct experience with agentic AI systems is valuable but not required.
  • You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority.
  • You communicate clearly with both technical and non-technical audiences.

Skills

Required:Software engineeringPython, Go, or TypeScriptSecurity reviews / threat modelingApplication security conceptsCloud, containers, Kubernetes, CI/CDCommunication

Benefits

  • A weekly lunch stipend of $75/£75 or equivalent in local currency
  • Full health and dental benefits, including a separate budget for mental health
  • RRSP matching, 401K, Pension Scheme
  • 100% Parental Leave top-up for up to 6 months
  • Annual enrichment benefits (arts & culture, fitness/wellness, quality time, workspace improvement credit)
  • Education & learning stipend for conferences, courses, and coaching
  • 6 weeks of paid vacation (30 working days)
  • Budget for traveling to other offices if you are remote, plus an annual company offsite
  • Co-working benefit and $500 home office stipend
Last updated Oct 21, 2026. Interested? Apply on the company site.
Cohere logo

About Cohere

Support automation that's actually intelligent

Cohere resolves 40-70% of support requests using AI, over all channels, within just a few days.

artificial-intelligenceautomationliquid-ai-recruiting-target
Company profileWebsite

More open roles at Cohere