Lead Product Security Engineer; Remote, High-Impact AI

Cohere; Seattle (WA); Hybrid; USD 162,000 - 232,000; Full time

Benefits offered by this job

Lunch stipend

Health and dental benefits

RRSP matching

401K

Parental leave

Enrichment benefits

Vacation

Travel budget

Home office stipend

Job summary

Cohere seeks a Senior Security Engineer in Seattle to lead security reviews, threat modeling, and secure AI-powered products. You will work with engineers to identify vulnerabilities and design mitigations to keep enterprise-grade models safe.

You will evaluate risks such as prompt injection, data exposure, tenant isolation, and sandbox escapes, translating findings into practical controls. The role favors strong software fundamentals and proficiency in Python, Go, or TypeScript.

Qualifications

• Strong software engineering fundamentals and ability to understand production codebases.
• Proficient in Python, Go, or TypeScript.
• Led security reviews or threat models for complex systems with measurable improvements.
• Understand vulnerability classes such as injection, auth flaws, IDOR, SSRF, and supply-chain risks.

Responsibilities

• Lead security reviews of architecture, code, and changes; identify vulnerabilities and patterns.
• Secure AI-powered products; assess risks like prompt injection and data exposure.
• Model threats for new capabilities; translate findings into mitigations.
• Perform hands-on testing; develop PoCs and partner with engineers for remediation.
• Build scalable guardrails; develop secure defaults and reusable controls.
• Strengthen engineering capability; document guidance for product teams.
• Influence risk decisions; clearly present findings to engineers and executives.

Skills

Python

Go

TypeScript

Tools

Kubernetes

CI/CD

Job description

Cohere seeks a Senior Security Engineer in Seattle to lead security reviews, threat modeling, and secure AI-powered products. You will work with engineers to identify vulnerabilities and design mitigations to keep enterprise-grade models safe.

You will evaluate risks such as prompt injection, data exposure, tenant isolation, and sandbox escapes, translating findings into practical controls. The role favors strong software fundamentals and proficiency in Python, Go, or TypeScript.