About this role
Cohere builds foundation AI models and end-to-end products designed to solve real-world business problems for enterprise systems. The engineering team focuses on training and deploying frontier models that drive customer value and enable the widespread adoption of artificial intelligence globally.
As a Senior Security Engineer in Toronto, the person in this role will serve as a trusted advisor to leadership and partner teams by articulating business risks associated with security issues. They will lead security operations functions across vulnerability management, detection engineering, and incident response within cloud-native environments. Success in this position requires a developer-empathetic, hands-on approach to building innovative solutions, driving bug bounty programs, and integrating automated security processes without compromising software deployment speed.
What you will do
- Serve as a trusted advisor to team leadership and partner teams by clearly communicating business risks tied to security issues.
- Lead security operations functions including vulnerability management, SAST, DAST, detection engineering, and incident response in cloud-native and CI/CD production environments.
- Integrate security measures directly into applications across the entire software development lifecycle.
- Partner with product and development teams to ensure software is built and deployed securely while maintaining development agility.
- Drive and support the bug bounty program, application security reviews, threat modeling, code reviews, and dynamic testing.
- Assess and integrate security tools to automate and scale processes by evaluating open-source versus vendor solutions.
- Gather and analyze security metrics to resolve issues involving cross-team dependencies.
What you need
- Bring five or more years of previous experience in application security, product security, or security operations with a focus on security tool onboarding and optimization.
- Possess a strong understanding of vulnerability management, network security, cloud security concepts, and industry best practices.
- Demonstrate comfort with ambiguity and the ability to make informed decisions with limited data.
- Employ a flexible, constructive, and empathetic approach to solving problems and addressing developer concerns.
- Make trade-offs between build versus buy decisions when evaluating available security tools.
- Understand secure engineering best practices and clearly articulate problem statements to both technical and non-technical audiences.
- Possess a deep technical understanding of common security vulnerabilities, risks, countermeasures, and compensating controls.
Benefits
- A weekly lunch stipend of $75/£75 or local currency equivalent
- Full health and dental benefits including a separate mental health budget
- RRSP matching, 401K, and Pension Scheme
- 100% Parental Leave top-up for up to 6 months for either parent
- Annual enrichment benefits covering arts, culture, fitness, wellness, and education
- 6 weeks of paid vacation totaling 30 working days
Skills and tech stack
Questions candidates ask
What is the remote work policy?
Cohere is remote-friendly and offers a co-working benefit for those not near an office, alongside a $500 home office stipend. The company also maintains physical offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin, and Seoul.
What is the compensation range for this role?
The salary range for the Senior Security Engineer position is CA$260K to CA$310K, and the compensation package includes equity.
What does the interview or hiring process involve?
Cohere may use AI-enabled tools to screen and assess applicants against the criteria for this position. The company also advises applicants to watch out for hiring scams and verify all legitimate roles through their official careers page.