- Experience
- 8+ yrs
- Salary
- CAD 320,000 – CAD 385,000 / year
- Openings
- 1
- Posted
- 3 seconds ago
- Work mode
- Work from home
- Resume
- Required to apply
Sign in to tell us what does and doesn't work for you here — it sharpens every match we show you.
Job description
About Cohere
Cohere is a cutting-edge, security-focused enterprise AI firm dedicated to creating foundational AI models and comprehensive solutions to address tangible business challenges. Our commitment drives the widespread utilization of AI technologies, powered by a team of experts spanning research, engineering, design, and more. Operating globally from Toronto and various major cities, we prioritize technical excellence and innovation.
Role Overview
As the Manager of Security Engineering, you will be instrumental in directing security strategy aligned with Cohere's product and business priorities. You will oversee vulnerability management, establish testing programs, lead penetration engagements, and embed secure development practices across teams, while mentoring and expanding a high-caliber security engineering group.
Key Responsibilities
- Advise leadership and partners on security-related business risks with clear communication.
- Develop and execute a long-term security vision synchronized with company goals.
- Collaborate with leadership to focus on impactful initiatives and strategic customer needs.
- Implement and manage company-wide vulnerability management systems for detection, prioritization, remediation, and reporting including customer-facing documentation.
- Design and maintain Static Application Security Testing (SAST) workflows integrated into CI/CD processes to identify source code vulnerabilities.
- Deploy Dynamic Application Security Testing (DAST) techniques and conduct routine security assessments of live applications.
- Lead both internal and external penetration testing across web, API, network, and agentic AI platforms, including management of the bug bounty program.
- Partner with development teams to verify secure architecture and design patterns.
- Integrate security throughout the software development life cycle alongside engineering and product teams.
- Lead, recruit, and nurture a top-tier security engineering team through coaching and mentorship.
- Establish security metrics, report regularly to leadership, and effectively communicate security status to stakeholders.
- Ensure security practices comply with standards such as OWASP Top10 for Large Language Models and ISO 27001, as well as regulatory requirements.
Candidate Profile
- Minimum 8 years of experience in Application Security or Security Engineering emphasizing vulnerability management, secure SDLC, and bug bounty programs.
- Demonstrated expertise with SAST, DAST, and penetration testing tools and methodologies.
- Proficient in programming languages such as Python and GoLang, with strong knowledge of web technologies.
- Experience working with cloud providers (AWS, Google Cloud Platform, Azure) and container security.
- Strong communication skills enabling influence over both technical and non-technical audiences.
- Proven ability to build and manage agile, high-performing security teams.
- Comfortable operating in ambiguous environments and making informed decisions with limited information.
- Adopts a flexible, constructive problem-solving approach and can balance build vs. buy solutions effectively.
- Deep understanding of security vulnerabilities, risks, and mitigation techniques alongside best secure engineering practices.
Work Environment and Benefits
- This is a remote position available for candidates in the US or Canada.
- Weekly lunch stipend valued at $75 or equivalent in local currency.
- Comprehensive health and dental coverage, including dedicated mental health budgets.
- Retirement savings plans with RRSP matching, 401K, or pension schemes as applicable.
- 100% parental leave top-up for up to six months for either parent.
- Annual enrichment budgets to support arts, culture, fitness, wellness, quality time, workspace improvements, education, conferences, courses, and coaching.
- Generous paid vacation: 6 weeks (30 working days).
- Travel budget to visit company offices plus an annual company-wide offsite event.
- Remote-friendly culture with office locations worldwide and support including home office stipend and coworking benefits.
Additional Information
Cohere is committed to inclusive hiring and equal opportunity. Accommodations during the recruitment process are available upon request. Warning against fraudulent job postings: official communication comes from Cohere email domains only. Compensation for this role ranges from CAD 320,000 to CAD 385,000 annually.