Note: The job is a remote job and is open to candidates in USA. Cohere is hiring a Senior Product Security Engineer to secure its AI-powered products and enterprise systems. The role works hands-on with product engineers to review architecture and code, threat model new capabilities, test vulnerabilities, and build reusable security guardrails.
Responsibilities
- Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them
- Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes
- Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations
- Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation
- Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks
- Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise
- Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives
Skills
- You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases
- You are proficient in at least one of Python, Go, or TypeScript
- You have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted
- You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks
- You understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems
- You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries
- You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority
- You communicate clearly with both technical and non-technical audiences
- Direct experience with agentic AI systems is valuable but not required
- Experience building or operating security tooling such as SAST, DAST, SCA, custom linters, or policy-as-code
- Experience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data
- Offensive security experience through penetration testing, red teaming or security research
- Experience operating or participating in a vulnerability disclosure or bug bounty program
- Contributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries
Benefits
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
- Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
- Cohere is remote-friendly.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
Company Overview
Company H1B Sponsorship