Product Security Engineer, North Security

Cohere; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

Cohere is hiring a Senior Product Security Engineer to work with product and engineering teams to secure AI-enabled products. You will review architecture and code, threat model new capabilities, and perform hands-on testing to drive secure defaults and reusable safeguards across the platform.

You will collaborate closely with engineers to translate security findings into actionable mitigations and help elevate overall security posture across product lines.

Qualifications

• Strong software engineering fundamentals and ability to understand, test, and fix production code.

Responsibilities

• Lead security reviews of architecture, code, and sensitive changes; identify vulnerabilities and recurring design patterns.
• Evaluate risks in AI-powered products: prompt injection, unsafe tool use, delegation failures, data exposure, tenant isolation, sandbox escapes.
• Model threats for new capabilities; define trust boundaries and mitigations before implementation.
• Conduct hands-on testing, develop proofs of concept, assess exploitability and impact with engineers.
• Create scalable guardrails: secure defaults, reusable controls, and automated checks to reduce risks.
• Collaborate with engineers; document guidance and help teams build durable security expertise.
• Explain findings and remediation options clearly to engineers, product leaders and executives.

Skills

Security reviews

Threat modeling

Hands-on testing

Secure AI products

Developer collaboration

Job description

Who are we?

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!

Why this role

Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far. We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one.

What you’ll do

• Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them.
• Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.
• Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations.
• Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
• Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.
• Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.
• Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives.

You may be a good fit if

You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases. You are proficient in at leas