Software Engineer, Security

Who are we?

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.

We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.

We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.

We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!

About the Role Are you passionate about secure-by-design software engineering? Do you want to be at the forefront of AI innovation and enterprise security? Cohere's North team is seeking a Software Engineer with a focus on security to join our mission and make a significant impact. This isn't a review-and-advise role, you'll own and ship production security features that customers rely on every day.

Your Role: As a Senior Software Engineer with a security focus, you'll play a pivotal role in building and securing North's architecture. Your responsibilities will include:

Software Development: Contributing to the core development of security features such as OIDC/OAuth flows and session management, ensuring North's AI agents are secure

Secure Coding: Writing secure code to handle OIDC tokens, user claims, and sensitive data, adhering to best practices for JWT validation and encryption

Authentication and Data Protection: Implementing authentication mechanisms including user login, token management, and authorization checks to maintain data integrity

Tool Integration: Pulling in new tools to enhance North's security capabilities

DevSecOps: Design and implement secret management within Kubernetes clusters, including encryption and RBAC

Cross-functional Collaboration: Demonstrate strong soft skills to communicate security best practices to stakeholders in a clear and concise manner

You may be a good fit if:

Have 5+ years building user-facing security features in production systems

Ship production Python confidently and frequently

Understand OIDC/OAuth 2.0, JWT validation, and token lifecycle management deeply—not just conceptually

Have hands-on experience with Kubernetes in both development and production environments

Have worked across GCP, AWS, Azure, or hybrid/multi-cloud deployments

Are comfortable working across the stack

Communicate security concepts clearly to non-security engineers and stakeholders

Thrive in fast-moving environments where priorities evolve

Experience working with AI/ML systems or LLM-based applications

Full-Time Employees at Cohere enjoy these Perks: