Specialty
The role
Cohere, an enterprise AI company, is hiring a senior Product Security Engineer for its North product. The role covers security reviews, threat modeling and testing of AI-powered products, working hands-on with engineering teams. Remote-friendly.
What you will do
- Lead security reviews of architecture, code and sensitive changes
- Assess AI product risks such as prompt injection, unsafe tool use, tenant isolation and sandbox escapes
- Threat model new capabilities before implementation and propose prioritized mitigations
- Test suspected vulnerabilities, build proofs of concept and support remediation
- Build secure defaults, reusable controls and automated checks
- Explain findings and risk to engineers, product leaders and executives
What they ask for
- Strong software engineering fundamentals
- Proficiency in at least one of Python, Go or TypeScript
- Led security reviews or threat models for complex production systems
- Knowledge of vulnerability classes: injection, IDOR, SSRF, authorization flaws, supply chain
- Understanding of web apps, APIs, OAuth/OIDC, cloud, containers, Kubernetes and CI/CD
- Experience driving security work across multiple teams
- Clear communication with technical and non-technical audiences
What they offer
- Weekly lunch stipend of $75 or equivalent
- Health and dental, plus mental health budget
- RRSP matching, 401K or pension
- 100% parental leave top-up for up to 6 months
- 6 weeks of paid vacation
- $500 home office stipend
This is our own short reading of the posting. The full description, and anything that has changed since, is on Cohere's careers page behind the apply button.
