[Remote] Manager, Security Engineering

Note: The job is a remote job and is open to candidates in USA. Cohere is a company focused on scaling intelligence to serve humanity through the deployment of AI systems. The Manager of Security Engineering will be responsible for leading the security team, managing vulnerability processes, and ensuring compliance with security standards while collaborating with leadership on strategic initiatives.ResponsibilitiesServe as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issuesExecute the long-term vision for the Security team in alignment with Cohere’s product and business goalsCollaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagementsVulnerability Management: Develop and implement enterprise-wide vulnerability management processes and tooling, including identification, prioritization, remediation tracking, and reporting, including customer artifactsStatic Application Security Testing (SAST): Establish SAST programs, integrate tools into CI/CD pipelines, and analyze results to identify and remediate security flaws in source codeDynamic Application Security Testing (DAST): Implement DAST methodologies, configure scanning tools, and conduct regular assessments of running applicationsPenetration Testing: Lead and oversee internal and external penetration testing engagements, including web application, API, network and agentic AI platform including managing our bug bounty programSecurity Architecture Review: Collaborate with development teams to review and validate security architecture and design patternsSecure SDLC Integration: Embed security practices throughout the software development lifecycle, working closely with engineering and product teamsTeam Leadership: Lead and grow a high-performing team of Security engineers through hiring, coaching, and mentorshipMetrics and Reporting: Establish key security metrics, generate regular reports for leadership, and communicate security posture to stakeholdersCompliance and Standards: Ensure application security practices align with industry standards (OWASP Top10 for LLMs, ISO 27001) and regulatory requirementsSkills8+ years of previous experience in Application Security / Security Engineering with a strong focus on vulnerability management, SDLC and bug bounty programsProven experience with SAST, DAST, and penetration testing methodologies and toolsProficiency with programming languages (Python, GoLang, etc.) and web technologiesExperience with cloud platforms (AWS, GCP, Azure) and container securityExcellent communication and interpersonal skills with ability to influence technical and non-technical stakeholdersExperience building and managing high-performing security teamsComfortable with ambiguity and able to make informed decisions with little dataEmploy a flexible and constructive approach when solving problemsAble to make trade-offs between build vs. buy decisions—help build solutions and be able to review what tools are availableUnderstand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiencesDeep technical understanding of common security vulnerabilities and risks, as well as countermeasures and compensating controlsBenefitsAn open and inclusive culture and work environmentWork closely with a team on the cutting edge of AI researchWeekly lunch stipend, in-office lunches & snacksFull health and dental benefits, including a separate budget to take care of your mental health100% Parental Leave top-up for up to 6 monthsPersonal enrichment benefits towards arts and culture, fitness and well-being, quality time, and workspace improvementRemote-flexible, offices in Toronto, New York, San Francisco, London and Paris, as well as a co-working stipend6 weeks of vacation (30 working days!)Company OverviewCohere develops enterprise artificial intelligence software and provides language models, retrieval tools, and workplace platforms. It was founded in 2019, and is headquartered in Toronto, Ontario, CAN, with a workforce of 201-500 employees. Its website is https://cohere.com.Company H1B SponsorshipCohere has a track record of offering H1B sponsorships, with 11 in 2025, 14 in 2024, 13 in 2023, 5 in 2022, 2 in 2021. Please note that this does not guarantee sponsorship for this specific role.