---
title: 'Product Security Engineer, North Security at Cohere'
canonical: 'https://feeny.ai/job/product-security-engineer-north-security-cohere-canada-vtf3rxavnq4h'
type: 'job'
last_seen: '2026-09-16'
---

# Product Security Engineer, North Security at Cohere

- **Company:** [Cohere](https://feeny.ai/companies/cohere)
- **Location:** Canada
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-11
- **Last confirmed live:** 2026-09-16
- **Apply:** https://jobs.ashbyhq.com/cohere/9b596ab8-0df4-41aa-85da-e07578c082b2

## Job description

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!

## Why this role

Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far. We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one.

## What you’ll do

- Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them.
- Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.
- Threat model new capabilities. Identify trust boundaries, abuse cases, and high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations.
- Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
- Build scalable guardrails. Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.
- Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.
- Influence risk decisions. Explain technical findings, business impact, and remediation options clearly to engineers, product leaders, and executives.

You may be a good fit if

- You have strong software engineering fundamentals and can independently understand, test, and contribute fixes to production codebases.
- You are proficient in at least one of Python, Go, or TypeScript.
- You have led security reviews or threat models for complex production systems and can point to meaningful design or risk improvements that resulted.
- You understand common vulnerability classes and their underlying design failures, including injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks.
- You understand modern application architecture, including web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems.
- You can reason rigorously about untrusted input, authorization, isolation, identity, delegation, and data boundaries. Direct experience with agentic AI systems is valuable but not required.
- You have driven security improvements involving multiple engineering teams, including situations where influence mattered more than authority.
- You communicate clearly with both technical and non-technical audiences.

## Nice to have

- Experience building or operating security tooling such as SAST, DAST, SCA, custom linters, or policy-as-code.
- Experience securing multi-tenant SaaS, enterprise software, or systems that process sensitive customer data.
- Offensive security experience through penetration testing, red teaming or security research.
- Experience operating or participating in a vulnerability disclosure or bug bounty program.
- Contributions to open-source security projects, published research, conference talks, or credited vulnerability discoveries.

Full-Time Employees at Cohere enjoy these Perks:

- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits: Arts & culture, fitness/wellness, quality time, and a workspace improvement credit. Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.

How and Where We Work:

- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.

If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.

We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an[Accommodations Request Form](https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit), and we will work together to meet your needs.

We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.

Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our [official careers](https://cohere.com/careers) page.

## About Cohere

## Company Overview
- **One-liner**: Cohere builds enterprise-grade AI foundation models and secure, customizable AI solutions that allow businesses to deploy generative, retrieval, and speech capabilities on their own infrastructure.
- **Entity Type**: Private (Series D, raised ~$1B as of 2024)
- **Headquarters**: Toronto, Canada (with offices in New York, London, San Francisco, Montreal, Paris, Seoul)
- **Founded**: 2019
- **Founders**: Aidan Gomez (CEO), Nick Frosst, Ivan Zhang

## Core Business
- Primary industry: Enterprise AI / Artificial Intelligence
- Target customers: B2B, primarily large enterprises and public sector organizations across finance, healthcare, manufacturing, telecommunications, energy, and government
- Mission statement: “Do whatever it takes to scale intelligence to serve humanity” – AI’s highest purpose is to enhance human wellbeing by empowering businesses to scale innovation, boost productivity, and drive progress.

## Products & Services
- **Command**: High-performance generative model with agentic capabilities, reasoning, tool orchestration, and multimodal intelligence – supports 49 languages.
- **Rerank**: Relevance-based search optimization that personalizes and refines results based on user needs.
- **Embed**: Semantic text representation for accurate document comparison and fast, scalable retrieval.
- **Transcribe**: High-fidelity speech-to-text engine supporting 14 languages, robust to real-world conversational environments.
- **North**: Turnkey AI workplace platform launched in 2025, offering agentic capabilities and advanced retrieval to automate tasks and surface insights securely grounded in enterprise data.
- **Cohere Labs**: Open science initiative with 4,500+ community members and 100+ published research papers.

## Competitive Advantages
- Full data sovereignty and security: Models can be deployed in a virtual private cloud (VPC), on-premises, or in a dedicated Cohere-managed Model Vault.
- Highly customizable: Clients can train on proprietary data and build unique AI solutions for specific use cases, infrastructure, and languages.
- Multi-layered protection with industry-certified security standards.
- Strong open science foundation (Cohere Labs) and research output (100+ papers).

## Strategic Focus
- Agentic AI for enterprise: Unified reasoning, tool orchestration, and multimodal intelligence in a single model.
- Sovereign AI workplace: Ensuring enterprises maintain control over their data and infrastructure.
- Expanding the North platform as a turnkey productivity solution.
- Global expansion with offices in North America, Europe, and Asia.

## Why Work Here
- **Culture**: “Flexible, collaborative, and built on trust.” Values of Autonomy, Openness, and Momentum.
- **Remote/hybrid**: Globally dispersed company that supports remote work; employees can work from anywhere. Offices in seven cities with catered lunches, snacks, and social events. Teams have budgets for offsite gatherings.
- **Benefits**:
  - Six weeks’ paid vacation
  - Equity/stock options (all co-owners)
  - Retirement benefits
  - Six months fully paid parental leave (including adoption/surrogacy)
  - Medical, health insurance, vision, travel coverage (varies by location)
  - Mental health provider access
  - Fertility/family planning financial support
  - Monthly fitness/wellness allowance
  - $2,000 annual education benefit for conferences/courses
  - Annual arts & culture allowance
  - Monthly quality time allowance
  - One-time workplace improvement stipend for home office
  - Monthly co-working benefit for remote employees
  - Weekly meal stipend for remote workers
- **Interview process**: Clear and collaborative – application review, recruiter conversation, take-home assignment, hiring manager, final team rounds. Video conference-friendly.

## Sources
1. [cohere.com](https://cohere.com/) – Product overview, security, and industry solutions
2. [cohere.com/about](https://cohere.com/about) – Company history, founders, mission, funding, team
3. [cohere.com/careers](https://cohere.com/careers) – Benefits, culture, FAQs, remote policy
4. [jobs.ashbyhq.com/cohere](https://jobs.ashbyhq.com/cohere) – Current job openings and internships
5. [linkedin.com/company/cohere-ai](https://www.linkedin.com/company/cohere-ai) – Company page, acquisitions, revenue reference

## Other roles at Cohere

- [Partner Development Manager - Japan](https://feeny.ai/job/partner-development-manager-japan-cohere-tokyo-qnahe2n5x2mr) — Tokyo, Japan
- [Revenue Enablement Program Manager](https://feeny.ai/job/revenue-enablement-program-manager-cohere-united-states-fam2n0x0fahg) — United States
- [Senior Full-Stack Engineer, Internal Applications](https://feeny.ai/job/senior-full-stack-engineer-internal-applications-cohere-toronto-zdzxjfvkaf61) — Toronto, Canada
- [Senior Account Executive](https://feeny.ai/job/senior-account-executive-cohere-stockholm-4janedb33rd3) — Stockholm, Sweden
- [Software Engineer, Security Agents](https://feeny.ai/job/software-engineer-security-agents-cohere-united-states-snr3159bn21w) — United States
- [Senior Account Executive, SLED (East)](https://feeny.ai/job/senior-account-executive-sled-east-cohere-united-states-rxxrg1m7w2y0) — United States
- [Senior Director, Solutions Architecture — Americas](https://feeny.ai/job/senior-director-solutions-architecture-americas-cohere-united-states-7y5wa9r8h16c) — United States
- [Senior Director, Integrated Marketing](https://feeny.ai/job/senior-director-integrated-marketing-cohere-toronto-830x7rgdnjg3) — Toronto, Canada
- [Software Engineer, Data Infrastructure](https://feeny.ai/job/software-engineer-data-infrastructure-cohere-united-states-gx69yn6bawnt) — United States
- [Forward Deployed Engineer, Infrastructure Specialist (Middle East)](https://feeny.ai/job/forward-deployed-engineer-infrastructure-specialist-middle-east-cohere-middle-gtfjdx0n29qp) — Middle East