Specialty
The role
Cohere is hiring a Senior Security Engineer to lead security operations across CI/CD and cloud-native production environments at its enterprise AI company. The work spans vulnerability management, detection, application security reviews and the bug bounty program. Cohere is remote-friendly with offices in several cities.
What you will do
- Advise leadership and partner teams on business risks from security issues
- Lead vulnerability management, SAST, DAST, detection engineering and incident response
- Build security into applications across the software development lifecycle
- Run application security reviews, threat modeling and code review, and support the bug bounty program
- Evaluate and integrate security tools, weighing open-source against vendor options
- Analyze security metrics to address cross-team issues
What they ask for
- 5+ years in Application/Product Security or Security Operations, focused on security tool onboarding and optimization
- Understanding of vulnerability management, network and cloud security
- Deep technical understanding of common vulnerabilities and countermeasures
- Ability to make build-versus-buy decisions
- Comfort with ambiguity and deciding with limited data
- Ability to explain risks to technical and non-technical audiences
- Hands-on interest in automating controls
What they offer
- Weekly lunch stipend
- Health and dental benefits with a mental health budget
- RRSP matching, 401K or pension scheme
- Parental leave top-up for up to 6 months
- 6 weeks of paid vacation
- Learning stipend and annual enrichment benefits
This is our own short reading of the posting. The full description, and anything that has changed since, is on Cohere's careers page behind the apply button.
