Senior Cloud Security Engineer — Secure-by-Default & Automate

Cohere; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

RRSP matching/401K

Parental leave (6 weeks)

Job summary

Cohere is seeking a Senior Security Operations Engineer to harden our cloud-native environments and automate security controls. You’ll drive incident response, build secure-by-default platforms, and empower engineers with scalable security patterns.

You will partner with DevSecOps, SREs and product teams across AWS, GCP, Azure and OCI, advancing threat detection, compliance and security observability in a remote-friendly, fast‑growing company.

Qualifications

• 5+ years in SecOps, DevSecOps or cloud security
• Hands-on security engineer focused on automation
• Experience with cloud platforms (GCP, AWS, Azure, OCI) and Kubernetes
• Familiar with CI/CD and SecOps workflows (Git, Terraform)
• Hands-on with infrastructure automation, network segmentation, hardening, and observability
• Proficient in Golang and/or Python
• Able to navigate ambiguity and communicate security trade-offs

Responsibilities

• Serve as trusted advisor to leadership on security risks
• Harden cloud environments with secure-by-default controls
• Own security scaffolding for engineering through IaC and reusable code
• Manage IAM/RBAC and unified access control across platforms
• Deploy and operationalize SIEM, SOAR, monitoring tools and cloud security tooling
• Respond to security incidents and drive post-incident hardening
• Support compliance monitoring and remediation
• Analyze security metrics and collaborate with cross-team partners
• Work with engineering teams to deliver scalable, practical security solutions

Skills

Security

Cloud security

Kubernetes

Terraform

Programming (Go/Python)

CI/CD

Incident response

Security observability

Job description

Cohere is seeking a Senior Security Operations Engineer to harden our cloud-native environments and automate security controls. You’ll drive incident response, build secure-by-default platforms, and empower engineers with scalable security patterns.

You will partner with DevSecOps, SREs and product teams across AWS, GCP, Azure and OCI, advancing threat detection, compliance and security observability in a remote-friendly, fast‑growing company.