{"id":739675,"url":"https://alion.io/job/cohere-product-security-engineer-north-security","title":"Product Security Engineer, North Security","company":{"id":270,"name":"Cohere","domain":"cohere.com","url":"https://alion.io/company/cohere","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":85,"open_postings":62,"ghost_share":0,"stale_share":0.387,"repost_share":0,"time_to_fill_p50_days":75,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["New York, United States","Vancouver, Canada","Seattle, United States","Boston, United States","Toronto, Canada","Ottawa, Canada","Calgary, Canada","Montreal, Canada"],"countries":["US","CA"],"hiring_countries":["CA","US"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":234000,"period":"year","method":"role_country_seniority_unknown","sample_n":173},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Function Calling","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-09-11T10:28:01Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-11-01T18:22:17Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Who are we?\nCohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.\nWe’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.\nWe obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.\nWe are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!\nWhy this role\nEnterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far.\nWe're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one.\nWhat you’ll do\nLead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them.\n\nSecure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.\n\nThreat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations.\n\nPerform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.\n\nBuild scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.\n\nStrengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.\n\nInfluence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives.\n\nYou may be a good fit if\nYou have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases.\n\nYou are proficient in at least one of Python, Go, or TypeScript.\n\nYou have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted.\n\nYou understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks.\n\nYou understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems.\n\nYou can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries. Direct experience with agentic AI systems is valuable but not required.\n\nYou have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority.\n\nYou communicate clearly with both technical and non-technical audiences.\n\nNice to have\nExperience building or operating security tooling such as SAST, DAST, SCA, custom linters, or policy-as-code.\n\nExperience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data.\n\nOffensive security experience through penetration testing, red teaming or security research.\n\nExperience operating or participating in a vulnerability disclosure or bug bounty program.\n\nContributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries.\n\nFull-Time Employees at Cohere enjoy these Perks:\nA weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.\n\nFull health and dental benefits, including a separate budget for mental health.\n\nRRSP matching, 401K, Pension Scheme.\n\n100% Parental Leave top-up for up to 6 months, for either parent.\n\nAnnual enrichment benefits:\nArts & culture, fitness/wellness, quality time, and a workspace improvement credit.\nEducation & learning stipend for conferences, courses, and coaching.\n\n6 weeks of paid vacation (30 working days!)\n\nBudget for traveling to other offices if you are remote, plus an annual company offsite.\n\nHow and Where We Work:\nCohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.\n\nFor those in the office: a daily lunch program, plenty of snacks, and regular community and social events.\n\nFor those not near an office: a co-working benefit so you can work alongside others in your city.\n\nEveryone receives a $500 home office stipend to set up your workspace properly.\n\nIf any of the above doesn’t line up exactly with your experience, we still encourage you to apply.\nWe strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form, and we will work together to meet your needs.\nWe may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.\nBeware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers page.","description_format":"text","description_chars":6719,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Home office","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"},{"name":"United States","iso":"US","kind":"country"},{"name":"New York","iso":null,"kind":"city"},{"name":"Vancouver","iso":null,"kind":"city"},{"name":"Seattle","iso":null,"kind":"city"},{"name":"Boston","iso":null,"kind":"city"},{"name":"Toronto","iso":null,"kind":"city"},{"name":"Ottawa","iso":null,"kind":"city"},{"name":"Calgary","iso":null,"kind":"city"},{"name":"Montreal","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","AI Agents","Foundation Models"],"lifecycle":[{"event":"open","at":"2026-09-11T12:15:32Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 8","filings_12m":8,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage; Global Talent Stream","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":1}],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":0.4,"p_active":0.852,"p_room":0.72,"age_days":50,"expected_fill_days":75,"reasons":["seen:50","velocity","win:mid","crowd:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/cohere-product-security-engineer-north-security","json_url":"https://alion.io/job/cohere-product-security-engineer-north-security.json","meta":{"generated_at":"2026-11-01T20:44:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31750,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":270},"rest":"https://alion.io/mcp/rest/get_company?id=270"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcohere-product-security-engineer-north-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcohere-product-security-engineer-north-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcohere-product-security-engineer-north-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cohere-product-security-engineer-north-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcohere-product-security-engineer-north-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":739675}},{"tool":"search_jobs","arguments":{"company":"cohere.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":739675},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}