The opportunity
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
What you'll do
Lead security reviews. Review architecture, code, and security-sensitive: changes. Identify both individual vulnerabilities and the recurring design patterns behind them.
Secure AI-powered products. Evaluate risks such as prompt injection, unsafe: tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.
Threat model new capabilities. Identify trust boundaries, abuse cases, and: high-impact failure modes before implementation. Translate findings into practical, prioritized mitigations.
Perform hands-on testing. Investigate suspected vulnerabilities, develop: proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
Build scalable guardrails. Develop secure defaults, approved patterns,: reusable controls, review requirements, and automated checks that reduce recurring risks.
Strengthen engineering capability. Pair with engineers, document practical: guidance, and help product teams develop durable security expertise.
What they're looking for
- Influence risk decisions. Explain technical findings, business impact, and: remediation options clearly to engineers, product leaders, and executives.
