Manager, Security Engineering

Visa Hunt; United States; On-site; CAD 320,000 - 385,000; Full time

Benefits offered by this job

Weekly lunch stipend

Health and dental benefits

RRSP matching

Parental Leave

Enrichment benefits

Vacation 30 days

Travel to offices

Home office stipend

Job summary

Cohere is a leading security-first enterprise AI company seeking a Manager of Security Engineering to lead vulnerability management, SAST/DAST programs, and penetration testing across our AI platforms.

You will partner with leadership to align security initiatives with product goals, oversee a high-performing team, and drive secure SDLC practices while communicating risk to both technical and non-technical stakeholders.

Qualifications

• 8+ years of experience in Application Security / Security Engineering with focus on vulnerability management, SDLC and bug bounty programs.
• Proven experience with SAST, DAST, and penetration testing methodologies and tools.
• Proficiency with programming languages (Python, GoLang, etc.) and web technologies.
• Experience with cloud platforms (AWS, GCP, Azure) and container security.
• Excellent communication and interpersonal skills with ability to influence stakeholders.
• Experience building and managing high-performing security teams.
• Ability to operate with ambiguity and make informed decisions with limited data.
• Ability to balance build vs. buy decisions and review available tools.

Responsibilities

• Serve as trusted advisor to leadership and partner teams, articulating business risks.
• Execute long-term vision for the Security team aligned with product goals.
• Collaborate with leadership to prioritize high-impact security initiatives and customer engagements.
• Develop and implement enterprise-wide vulnerability management processes and tooling.
• Establish SAST programs and integrate tools into CI/CD pipelines to remediate flaws.
• Implement DAST methodologies and conduct regular assessments of running apps.
• Lead internal and external penetration testing engagements, manage bug bounty program.
• Review security architecture and designs with development teams.
• Embed security practices across the SDLC in collaboration with engineering and product teams.
• Lead and grow a high-performing security engineering team.
• Establish security metrics and report posture to stakeholders.
• Ensure practices align with OWASP Top10 for LLMs, ISO 27001 and regulatory requirements.

Skills

Python

GoLang

Cloud platforms

Container security

Vulnerability management

SAST/DAST

Penetration testing

Communication

Tools

SAST tools

DAST tools

Penetration testing tools

CI/CD integrations

Job description

Who are we?

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.

We're training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.

We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.

We are a global technology company co-headquartered in Toronto and San Francisco, with key offices in London, New York City, Montreal, Seoul, Germany and Paris. Join us!

As a Manager of Security Engineering, your key responsibilities include:

• Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues

• Execute the long-term vision for the Security team in alignment with Cohere’s product and business goals.

• Collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements.

• Vulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifacts

• Static Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source code

• Dynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applications

• Penetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty program

• Security Architecture Review: Collaborate with development teams to review and validate security architecture and design patterns

• Secure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teams

• Team Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorship

• Metrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholders

• Compliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirements

You may be a good fit if:

• You have 8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programs.

• Proven experience with SAST, DAST, and penetration testing methodologies and tools

• Proficiency with programming languages (Python, GoLang, etc.) and web technologies

• Experience with cloud platforms (AWS, GCP, Azure) and container security

• Excellent communication and interpersonal skills with ability to influence technical and non-technical stakeholders

• Experience building and managing high-performing security teams

• You are comfortable with ambiguity and are able to make informed decisions with little data.

• You employ a flexible and constructive approach when solving problems.

• You are able to make trade-offs between build vs. buy decisions—help build solutions and be able to review what tools are available.

• You understand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiences.

• You have a deep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controls.

Working Location:

Remote US or Canada

Compensation:

Cohere is committed to fair and transparent pay practices. The salary range listed for this role reflects the expected base compensation. Actual compensation offered will be determined by factors such as location, level, job-related knowledge, skills, education, and experience.

For candidates in the US, the Compensation Range is: $225,000 - $325,000 [USD]

For candidates in Canada, the Compensation Range is: $320,000 - 385,000 [CAD]

Full-Time Employees at Cohere enjoy these Perks:

• A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.

• Full health and dental benefits, including a separate budget for mental health.

• RRSP matching, 401K, Pension Scheme.

• 100% Parental Leave top-up for up to 6 months, for either parent.

• Annual enrichment benefits:

  Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.

  Education & learning stipend for conferences, courses, and coaching.

• 6 weeks of paid vacation (30 working days!)

• Budget for traveling to other offices if you are remote, plus an annual company offsite.

How and Where We Work:

• Cohere is remote-friendly. We have offices in Toronto, San Francisco, New York City, London, Paris, Montreal, and more coming soon.

• For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.

• For those not near an office: a co-working benefit so you can work alongside others in your city.

• Everyone receives a $500 home office stipend to set up your workspace properly.

We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form, and we will work together to meet your needs.

We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.