Manager, Security Engineering

Cohere; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Inclusive culture

Weekly lunch stipend

Full health and dental benefits

100% Parental Leave top-up

6 weeks of vacation

Job summary

Cohere is seeking a Security Expert to lead efforts in vulnerability management and security practices. You'll ensure that security is integrated into every phase of product development while guiding a team of security engineers.

The ideal candidate has over 8 years of experience in application security and can influence both technical and non-technical stakeholders. Join Cohere and help shape the future of AI!

Qualifications

• 8+ years of experience in Application Security / Security Engineering.
• Proven experience with vulnerability management, SAST, DAST, and penetration testing.
• Excellent communication and interpersonal skills.

Responsibilities

• Serve as trusted advisor to team’s leadership on security issues.
• Execute long-term vision for the Security team aligned with business goals.
• Develop vulnerability management processes including tracking and reporting.

Skills

Application Security

Vulnerability Management

Penetration Testing

SAST

DAST

Cloud Platforms

Programming Languages

Team Leadership

Compliance Standards

Tools

AWS

GCP

Azure

Job description

Location

United States; Canada

Employment Type

Full time

Location Type

On-site

Department

Product Security

Who are we?

Our mission is to scale intelligence to serve humanity. We’re training and deploying frontier models for developers and enterprises who are building AI systems to power magical experiences like content generation, semantic search, RAG, and agents. We believe that our work is instrumental to the widespread adoption of AI.

We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. We like to work hard and move fast to do what’s best for our customers.

Cohere is a team of researchers, engineers, designers, and more, who are passionate about their craft. Each person is one of the best in the world at what they do. We believe that a diverse range of perspectives is a requirement for building great products.

Join us on our mission and shape the future!

Key Responsibilities

• Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues
• Execute the long-term vision for the Security team in alignment with Cohere’s product and business goals.
• Collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements.
• Vulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifacts
• Static Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source code
• Dynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applications
• Penetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program
• Security Architecture Review: Collaborate with development teams to review and validate security architecture and design patterns
• Secure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teams
• Team Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorship
• Metrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholders
• Compliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirements

Preferred Qualifications

• You have 8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programs.
• Proven experience with SAST, DAST, and penetration testing methodologies and tools
• Proficiency with programming languages (Python, GoLang, etc.) and web technologies
• Experience with cloud platforms (AWS, GCP, Azure) and container security
• Excellent communication and interpersonal skills with ability to influence technical and non-technical stakeholders
• Experience building and managing high-performing security teams
• You are comfortable with ambiguity and are able to make informed decisions with little data.
• You employ a flexible and constructive approach when solving problems.
• You are able to make trade-offs between build vs. buy decisions—help build solutions and be able to review what tools are available.
• You understand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiences.
• You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls.

If some of the above doesn’t line up perfectly with your experience, we still encourage you to apply!

We value and celebrate diversity and strive to create an inclusive work environment for all. We welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit Accommodations Request Form, and we will work together to meet your needs.

Benefits

• An open and inclusive culture and work environment
• Work closely with a team on the cutting edge of AI research
• Weekly lunch stipend, in-office lunches & snacks
• Full health and dental benefits, including a separate budget to take care of your mental health
• 100% Parental Leave top‑up for up to 6 months
• Personal enrichment benefits towards arts and culture, fitness and well‑being, quality time, and workspace improvement
• Remote‑flexible, offices in Toronto, New York, San Francisco, London and Paris, as well as a co‑working stipend
• 6 weeks of vacation (30 working days!)