Software Engineer, Security

About the Role

Cohere's North team is seeking a Software Engineer with a focus on security to join their mission and make a significant impact. This isn't a review-and-advise role, you'll own and ship production security features that customers rely on every day. The broader mission is to scale intelligence to serve humanity, training and deploying frontier models for developers and enterprises building AI systems for magical experiences like content generation, semantic search, RAG, and agents. Cohere is a team of researchers, engineers, designers, and more, passionate about their craft, believing that a diverse range of perspectives is required for building great products. The role contributes to increasing the capabilities of models and the value they drive for customers.

Responsibilities

• Software Development: Contributing to the core development of security features such as OIDC/OAuth flows and session management, ensuring North's AI agents are secure
• Secure Coding: Writing secure code to handle OIDC tokens, user claims, and sensitive data, adhering to best practices for JWT validation and encryption
• Authentication and Data Protection: Implementing authentication mechanisms including user login, token management, and authorization checks to maintain data integrity
• Tool Integration: Pulling in new tools to enhance North's security capabilities
• DevSecOps: Design and implement secret management within Kubernetes clusters, including encryption and RBAC
• Cross-functional Collaboration: Demonstrate strong soft skills to communicate security best practices to stakeholders in a clear and concise manner

Requirements

• 5+ years building user-facing security features in production systems
• Ship production Python confidently and frequently
• Understand OIDC/OAuth 2.0, JWT validation, and token lifecycle management deeply—not just conceptually
• Have hands-on experience with Kubernetes in both development and production environments
• Have worked across GCP, AWS, Azure, or hybrid/multi-cloud deployments
• Are comfortable working across the stack
• Communicate security concepts clearly to non-security engineers and stakeholders
• Thrive in fast-moving environments where priorities evolve

Qualifications

Experience working with AI/ML systems or LLM-based applications