Software Engineer, Security at Cohere in Toronto

Job description

• Application
• Are you passionate about secure-by-design software engineering? Do you want to be at the forefront of AI innovation and enterprise security? Cohere's North team is seeking a Software Engineer with a focus on security to join our mission and make a significant impact. This isn't a review-and-advise role, you'll own and ship production security features that customers rely on every day.

Responsibilities

• As a Senior Software Engineer with a security focus, you'll play a pivotal role in building and securing North's architecture. Your responsibilities will include:
• Software Development: Contributing to the core development of security features such as OIDC/OAuth flows and session management, ensuring North's AI agents are secure
• Secure Coding: Writing secure code to handle OIDC tokens, user claims, and sensitive data, adhering to best practices for JWT validation and encryption
• Authentication and Data Protection: Implementing authentication mechanisms including user login, token management, and authorization checks to maintain data integrity
• Tool Integration: Pulling in new tools to enhance North's security capabilities
• DevSecOps: Design and implement secret management within Kubernetes clusters, including encryption and RBAC
• Cross-functional Collaboration: Demonstrate strong soft skills to communicate security best practices to stakeholders in a clear and concise manner

Requirements

• Have 5+ years building user-facing security features in production systems
• Ship production Python confidently and frequently
• Understand OIDC/OAuth 2.0, JWT validation, and token lifecycle management deeply—not just conceptually
• Have hands-on experience with Kubernetes in both development and production environments
• Have worked across GCP, AWS, Azure, or hybrid/multi-cloud deployments
• Are comfortable working across the stack
• Communicate security concepts clearly to non-security engineers and stakeholders
• Thrive in fast-moving environments where priorities evolve
• Experience working with AI/ML systems or LLM-based applications

Skills

Required

• Python
• OIDC/OAuth 2.0
• JWT validation
• Token lifecycle management
• Kubernetes
• Secure coding
• Authentication mechanisms
• Authorization checks
• Secret management
• RBAC
• Encryption

Preferred

• AI/ML systems
• LLM-based applications

Benefits

• A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
• Full health and dental benefits, including a separate budget for mental health.
• RRSP matching, 401K, Pension Scheme.
• 100% Parental Leave top-up for up to 6 months, for either parent.
• Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
• Education & learning stipend for conferences, courses, and coaching.
• 6 weeks of paid vacation (30 working days!)
• Budget for traveling to other offices if you are remote, plus an annual company offsite.
• USA - California, New York and Washington
• Base Salary $215K – $325K • Offers Equity
• USA - All Other States
• Base Salary $180K – $275K • Offers Equity
• Canada
• Base Salary CA$260K – CA$385K • Offers Equity
• Cohere is committed to fair and transparent pay practices. The compensation range listed for this role reflects the expected compensation. Actual compensation offered will be determined by factors such as location, level, job-related knowledge, skills, education, and experience.