软件工程师,安全
Software Engineer, Security
我们是谁?
Cohere 是一家以安全为首要任务的企业人工智能公司。我们构建前沿的基础 AI 模型和端到端产品,旨在解决现实世界中的业务问题。
我们正在为正在构建 AI 系统的企业训练和部署前沿模型。我们认为我们的工作对 AI 的广泛应用至关重要,我们正在寻找希望参与其中的人才。
我们对所构建的产品充满热情。我们每个人都负责提升模型的能力以及为客户创造的价值。Cohere 是一个由研究人员、工程师、设计师等组成的团队,大家对各自的专业充满热情。
我们是一家总部位于多伦多的全球科技公司,在伦敦、纽约市、旧金山、蒙特利尔、巴黎、柏林和首尔设有主要办公室。加入我们吧!
职位简介
你是否热衷于以安全为核心的设计软件工程?你是否希望站在 AI 创新和企业安全的最前沿?Cohere 的北美团队正在寻找一位专注于安全的软件工程师加入我们的使命并产生重大影响。这不是一个审查和建议的角色,你将负责并交付客户每天依赖的生产安全功能。
你的职责:
作为一位专注于安全的高级软件工程师,你将在构建和保护 North 的架构中发挥关键作用。你的职责包括:
- 软件开发:参与安全功能的核心开发,如 OIDC/OAuth 流程和会话管理,确保 North 的 AI 代理安全
- 安全编码:编写处理 OIDC 令牌、用户声明和敏感数据的安全代码,遵循 JWT 验证和加密的最佳实践
- 身份验证和数据保护:实现身份验证机制,包括用户登录、令牌管理和授权检查,以维护数据完整性
- 工具集成:引入新工具以增强 North 的安全能力
- DevSecOps:设计和实现 Kubernetes 集群中的秘密管理,包括加密和 RBAC
- 跨职能协作:展示良好的软技能,清晰简洁地向相关方传达安全最佳实践
你可能适合这个职位,如果你:
- 有 5 年以上在生产系统中构建面向用户的安全功能的经验
- 能够自信且频繁地使用 Python 进行生产级开发
- 理解 OIDC/OAuth 2.0、JWT 验证和令牌处理
查看英文原文
Who are we?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
About the Role
Are you passionate about secure-by-design software engineering? Do you want to be at the forefront of AI innovation and enterprise security? Cohere's North team is seeking a Software Engineer with a focus on security to join our mission and make a significant impact. This isn't a review-and-advise role, you'll own and ship production security features that customers rely on every day.
Your Role:
As a Senior Software Engineer with a security focus, you'll play a pivotal role in building and securing North's architecture. Your responsibilities will include:
- Software Development: Contributing to the core development of security features such as OIDC/OAuth flows and session management, ensuring North's AI agents are secure
- Secure Coding: Writing secure code to handle OIDC tokens, user claims, and sensitive data, adhering to best practices for JWT validation and encryption
- Authentication and Data Protection: Implementing authentication mechanisms including user login, token management, and authorization checks to maintain data integrity
- Tool Integration: Pulling in new tools to enhance North's security capabilities
- DevSecOps: Design and implement secret management within Kubernetes clusters, including encryption and RBAC
- Cross-functional Collaboration: Demonstrate strong soft skills to communicate security best practices to stakeholders in a clear and concise manner
You may be a good fit if:
- Have 5+ years building user-facing security features in production systems
- Ship production Python confidently and frequently
- Understand OIDC/OAuth 2.0, JWT validation, and token lifecycle management deeply—not just conceptually
- Have hands-on experience with Kubernetes in both development and production environments
- Have worked across GCP, AWS, Azure, or hybrid/multi-cloud deployments
- Are comfortable working across the stack
- Communicate security concepts clearly to non-security engineers and stakeholders
- Thrive in fast-moving environments where priorities evolve
- Experience working with AI/ML systems or LLM-based applications
FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS:
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
HOW AND WHERE WE WORK:
- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.