Senior Product Security Engineer – Secure AI Systems

Cohere; Montreal (administrative region); Hybrid; CAD 230,000 - 330,000; Full time

Benefits offered by this job

Lunch stipend + meals

Health and dental benefits

RRSP matching / 401K

Parental leave top-up

Enrichment benefits

Job summary

Cohere is seeking a Senior Product Security Engineer to tackle security challenges across our AI production stack. You will review architecture and code, model threats, and turn findings into practical mitigations.

Join a hands-on role that pairs with product and engineering teams to ship secure AI products, define secure defaults, and scale guardrails across multi-tenant systems in a remote-friendly setup.

Qualifications

• Strong software engineering fundamentals and ability to contribute fixes to production codebases.
• Proficiency in Python, Go, or TypeScript.
• Led security reviews or threat models for complex systems and improved design or risk outcomes.
• Understanding of vulnerability classes and related design failures (e.g., injection, authorization, IDOR).
• Familiarity with modern app architectures (web APIs, OAuth/OIDC, cloud, containers, Kubernetes, CI/CD).
• Ability to reason about untrusted input, isolation, identity, delegation, and data boundaries.

Responsibilities

• Lead security reviews of architecture, code, and sensitive changes.
• Secure AI-powered products by evaluating risks (prompt injection, data exposure, tenant isolation).
• Threat model new capabilities and translate findings into mitigations.
• Perform hands-on testing, develop proofs of concept, and partner with engineers for remediation.
• Build scalable guardrails: secure defaults, reusable controls, and automated checks.
• Strengthen engineering capability by documenting guidance and sharing security expertise.
• Influence risk decisions by clearly explaining findings and remediation options.

Skills

Software engineering

Python

Go

TypeScript

Threat modeling

Security reviews

Vulnerability knowledge

Communication

Leadership across teams

Tools

SAST

DAST

SCA

Policy-as-code

Job description

Cohere is seeking a Senior Product Security Engineer to tackle security challenges across our AI production stack. You will review architecture and code, model threats, and turn findings into practical mitigations.

Join a hands-on role that pairs with product and engineering teams to ship secure AI products, define secure defaults, and scale guardrails across multi-tenant systems in a remote-friendly setup.