Remote-First Product Security Engineer for AI

Cohere; New York (NY); Hybrid; USD 170,000 - 230,000; Full time

Benefits offered by this job

Lunch stipend

Health benefits

RRSP matching

Parental leave

Education stipend

Vacation

Home office stipend

Job summary

Cohere in New York seeks a Senior Product Security Engineer to secure AI-powered products through architecture reviews, threat modeling, and hands-on testing. You’ll work with product and engineering teams to implement durable security defaults and mitigations across systems.

You should bring strong software engineering fundamentals and be proficient in Python, Go, or TypeScript, with proven threat modeling and secure design experience.

Qualifications

• Strong software engineering fundamentals and ability to understand, test, and contribute fixes to production codebases.
• Proficient in at least one of Python, Go, or TypeScript.
• Led security reviews or threat models for complex production systems with measurable improvements.
• Knowledge of common vulnerability classes and their design failures (injection, auth, IDOR, SSRF, etc.).
• Familiarity with modern app architectures including web apps, APIs, OAuth/OIDC, cloud, containers, Kubernetes, and CI/CD.

Responsibilities

• Lead security reviews of architecture, code, and sensitive changes; identify vulnerabilities and design patterns.
• Secure AI-powered products by evaluating risks like prompt injection, unsafe tool use, identity and delegation failures, data exposure, and tenant isolation.
• Threat model new capabilities; identify trust boundaries and high-impact failure modes before implementation.
• Perform hands-on testing, develop proofs of concept, assess exploitability and impact, and collaborate with engineers on remediation.
• Build scalable guardrails with secure defaults, reusable controls, and automated checks to reduce recurring risks.
• Strengthen engineering capability by pairing with engineers, documenting guidance, and building security expertise across product teams.
• Influence risk decisions by clearly explaining findings and remediation options to engineers, product leaders, and executives.

Skills

Python

Go

TypeScript

Software fundamentals

Threat modeling

Security reviews

Tools

SAST

DAST

SCA

Linters

Job description

Cohere in New York seeks a Senior Product Security Engineer to secure AI-powered products through architecture reviews, threat modeling, and hands-on testing. You’ll work with product and engineering teams to implement durable security defaults and mitigations across systems.

You should bring strong software engineering fundamentals and be proficient in Python, Go, or TypeScript, with proven threat modeling and secure design experience.