Manager, Security Engineering

About Cohere

Cohere is a pioneering enterprise AI company focused on security-first solutions. We develop advanced foundational AI models and comprehensive products that address tangible business challenges. Our mission encompasses training and deploying cutting-edge AI models tailored for enterprise applications, fostering wide adoption of AI across industries. Our diverse team comprises researchers, engineers, designers, and subject matter experts dedicated to advancing both our models' capabilities and the value delivered to customers. Headquartered in Toronto with offices worldwide, including London, New York, San Francisco, Montreal, Paris, Berlin, and Seoul, we invite you to join our dynamic team.

Role Responsibilities

• Act as a trusted security advisor to senior leadership and cross-functional teams by clearly communicating business risks tied to security concerns.
• Shape and implement the strategic vision for the Security team aligned with Cohere’s product and business objectives.
• Partner with leadership to prioritize critical security projects and engagements with strategic customers.
• Develop and oversee enterprise-wide vulnerability management programs encompassing identification, prioritization, remediation tracking, and reporting, including producing customer-facing documentation.
• Implement and manage Static Application Security Testing (SAST) programs by integrating tools into CI/CD pipelines and analyzing findings to address code vulnerabilities.
• Deploy Dynamic Application Security Testing (DAST) methodologies, configure scanning tools, and conduct ongoing evaluations of live applications.
• Lead internal and external penetration testing initiatives including web applications, APIs, network infrastructure, and agentic AI platforms, and manage the bug bounty program.
• Collaborate with development teams to conduct security architecture reviews and confirm robustness of design patterns.
• Embed security best practices throughout the software development lifecycle in close coordination with engineering and product stakeholders.
• Lead, mentor, and expand a high-performing Security engineering team through hiring and coaching efforts.
• Establish critical security metrics, provide regular reporting to leadership, and effectively communicate the organization's security status to various stakeholders.
• Ensure that application security practices comply with industry standards such as OWASP Top 10 for Large Language Models and ISO 27001, along with regulatory requirements.

Candidate Profile

• Minimum 8 years of experience in Application Security or Security Engineering with emphasis on vulnerability management, secure SDLC, and bug bounty program oversight.
• Demonstrated expertise in SAST, DAST, and penetration testing strategies and tools.
• Strong proficiency in programming languages like Python and Go, as well as web technologies.
• Experience working with cloud environments such as AWS, GCP, and Azure, including container security.
• Exceptional communication skills capable of influencing both technical and non-technical audiences.
• Proven track record in building and leading high-performance security teams.
• Comfortable operating in ambiguous settings and making well-informed decisions without complete data.
• Adaptable and constructive problem-solving approach.
• Ability to balance build-versus-buy decisions by developing solutions internally and evaluating third-party tools effectively.
• Deep technical knowledge of common security vulnerabilities, associated risks, and applicable mitigation strategies and controls.

Working Location

This is a remote position open to candidates based in the US or Canada.

Compensation

Cohere provides transparent salary frameworks with base pay reflecting location, level, knowledge, skills, education, and experience.

• US-based applicants can expect a salary range of $225,000 to $325,000 USD annually.
• Canada-based applicants can anticipate compensation between $320,000 and $385,000 CAD annually.

Employee Benefits

• Weekly lunch stipend of $75 or equivalent in your local currency.
• Comprehensive health and dental coverage, including dedicated mental health budget.
• Retirement benefits such as RRSP matching, 401(k), and pension plans.
• Full parental leave top-up for up to six months applicable to either parent.
• Annual enrichment benefits covering arts, culture, fitness, wellness, quality time, workspace upgrades, and educational opportunities like conferences and coaching.
• Generous vacation allowance totaling six weeks (30 workdays).
• Travel budgets for visiting other offices and an annual company-wide offsite event.

Work Environment

• Cohere embraces a remote-friendly culture with office hubs worldwide.
• For on-site employees: daily lunch provisions, snacks, and frequent social and community events.
• For remote workers outside office locations: co-working allowances for collaborative workspaces.
• All staff receive a $500 home office stipend to optimize their workspace.

Additional Information

Cohere promotes inclusive hiring practices and encourages applicants from diverse backgrounds. Accommodations are available during hiring upon request. The recruitment process may utilize AI tools to assist candidate assessment while ensuring thorough human review.

Warning against scams: Only official communications from Cohere employees with authorized email domains are valid. Applicants should verify job listings via official Cohere channels.