AppSec Jobs

Cohere

Senior Security Engineer

New York, NYPosted 10 months agoWebsite
Apply on Cohere's site →

At a Glance

CI/CDThreat ModelingCode ReviewIncident ResponseSASTDAST

About This Role

Who are we?

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.

We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.

We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.

We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!

As a Senior Security Engineer you will:

  • Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues

  • Lead security operation functions – including vulnerability management, SAST, DAST, detection engineering, and incident response – in CI/CD and cloud-native production environments

  • Integrate security into our applications throughout the software development lifecycle

  • Collaborate with product and development teams, driving the success of larger projects to ensure that software is built and deployed securely without compromising agility and speed

  • Driving and supporting bug bounty program, application security reviews and threat modeling, including code review and dynamic testing

  • Assess and integrate security tools to automate and scale security processes, i.e: evaluate open-source vs vendor solutions

  • Gather and analyze security metrics to address security issues with cross-team dependencies

  • Be a problem solver who is empathetic to developer concerns and will employ constructive and flexible approach to building innovative solutions

You may be a good fit if:

  • 5+ years previous experience in Application/Product Security or Security Operations with a strong focus on security tool onboarding and optimization

  • You have an understanding of vulnerability management, network security, cloud security concepts, and industry best practices across many fields of security

  • You are comfortable with ambiguity and are able to make informed decisions with little data

  • You employ a flexible and constructive approach when solving problems

  • You are able to make trade-offs between build vs. buy decisions - help build solutions and able to review what tools are available

  • You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences

  • You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls

  • You’re a hands-on security engineer interested in automating controls

Full-Time Employees at Cohere enjoy these Perks:

  • A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.

  • Full health and dental benefits, including a separate budget for mental health.

  • RRSP matching, 401K, Pension Scheme.

  • 100% Parental Leave top-up for up to 6 months, for either parent.

  • Annual enrichment benefits:

    Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.

    Education & learning stipend for conferences, courses, and coaching.

  • 6 weeks of paid vacation (30 working days!)

  • Budget for traveling to other offices if you are remote, plus an annual company offsite.

How and Where We Work:

  • Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.

  • For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.

  • For those not near an office: a co-working benefit so you can work alongside others in your city.

  • Everyone receives a $500 home office stipend to set up your workspace properly.

If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.


We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form, and we will work together to meet your needs.

We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.

Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers page.

Source: Cohere careers · View original posting


About Cohere

Cohere is an enterprise artificial intelligence platform based in Toronto, Canada, founded in 2019. The company specializes in building foundational models and AI solutions that help organizations automate processes, enhance productivity, and turn data into actionable insights. Cohere serves various sectors, including financial services, healthcare, manufacturing, energy, and the public sector. Cohere offers a range of products, including generative models for multilingual content generation, retrieval and search models for organizing large datasets, and enterprise workspace solutions designed for secure AI applications. Their healthcare-specific platform, Cohere Health, provides clinical intelligence solutions for healthcare payers. The company emphasizes multilingual capabilities, enterprise-grade security, and a unified platform that combines generative and retrieval AI, making it well-suited for organizations with specific data and compliance needs. Cohere's notable customers include Fujitsu, Oracle, and the Royal Bank of Canada.

Industry

information technology & services

Employees

850

99 engineers

Revenue

$100M

Website

Visit →

Security at Cohere

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

“Cohere's AppSec philosophy is driven by a "security-first culture"and a "defense-in-depth"risk approach, aiming to be the "leading security-first enterprise AI company."The final risk authority is "delegated by Cohere's CEO to Cohere's Chief Scientist."They conduct "annual third-party audits and penetration tests"and maintain a "Bug Bounty program."Their approach involves integrating security "throughout the software development lifecycle"and performing "robust vulnerability management testing"before major model releases. Explicit language describing "developer-first"versus "gatekeeping"is not publicly available.”

Security Team

  • An information security team has been established at Cohere to govern cybersecurity, with executive risk decision-making "delegated by Cohere's CEO to Cohere's Chief Scientist."Key public-facing leaders were not found in the scraped sources.
  • The company size is estimated at "201-500 employees."Active AppSec-related job postings, such as "Senior Security Engineer"and "Senior Software Engineer, Secure Agents,"indicate common skill patterns like "vulnerability management, SAST, DAST"and a focus on being "empathetic to developer concerns."Public evidence of named AppSec leaders and direct reporting chains was not found.

Key Initiatives

  • Cohere's AppSec initiatives include conducting "annual third-party audits and penetration tests"and operating a "Bug Bounty program."Vulnerability management is a key security operation function, and they implement "Secure Product Lifecycle controls,"encompassing security requirements gathering, threat modeling, code reviews, penetration testing, and bug bounty programs. They also "Integrate security into our applications throughout the software development lifecycle"as a shift-left practice.
  • No direct public evidence was found for a "Security Champions Program,"explicit recent initiatives (last 6 months), or specific SLA/MTTR statements.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Cohere's site