Product Security Engineer, North Security
Remote • Canada • FullTime
Posted 3d ago
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
Cohere is seeking a Senior Product Security Engineer to join their North Security team. This is a hands-on engineering role focused on securing AI-powered products for enterprises handling sensitive data. You will work closely with product engineers to review architecture and code, perform threat modeling, conduct hands-on testing, and develop scalable security guardrails. The goal is to identify and mitigate risks specific to AI systems, such as prompt injection, unsafe tool use, and data exposure, and to translate learnings into reusable security defaults for other teams. You will also be responsible for strengthening the security capabilities of engineering teams through guidance and collaboration.
Responsibilities
- Lead security reviews of architecture, code, and security-sensitive changes.
- Identify and mitigate AI-specific risks including prompt injection, unsafe tool use, identity and delegation failures, data exposure, and tenant isolation.
- Perform threat modeling for new capabilities to identify trust boundaries, abuse cases, and failure modes.
- Conduct hands-on testing to investigate vulnerabilities, develop proofs of concept, and assess impact.
- Develop secure defaults, approved patterns, and automated checks to reduce recurring risks.
- Strengthen engineering capability by pairing with engineers and documenting guidance.
- Communicate technical findings and business impact to various stakeholders.
Requirements
- Strong software engineering fundamentals with the ability to understand, test, and fix production code.
- Proficiency in at least one of Python, Go, or TypeScript.
- Experience leading security reviews or threat models for complex production systems.
- Understanding of common vulnerability classes and design failures.
- Knowledge of modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD.
- Ability to reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries.
- Proven ability to drive security improvements across multiple engineering teams.
Benefits
- Weekly lunch stipend of $75/£75 or equivalent.
- Full health and dental benefits, including a mental health budget.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months.
- Annual enrichment benefits (arts & culture, fitness/wellness, quality time, workspace improvement).
- Education & learning stipend for conferences, courses, and coaching.
- 6 weeks (30 working days) of paid vacation.
- Budget for traveling to other offices.
- Annual company offsite.
- Co-working benefit for those not near an office.
- $500 home office stipend.