Security Operations Manager

📋 Description

• • As a Security Operations Manager at Cohere Inc., you will play a pivotal role in safeguarding our cutting-edge AI infrastructure and data. You will be instrumental in shaping and executing the long-term vision for our Security team, ensuring it aligns seamlessly with Cohere’s ambitious product and business objectives. This is a leadership position where you will serve as a trusted advisor to the team’s leadership and partner teams, providing clear articulation of business risks associated with security vulnerabilities and incidents.
• • Your primary responsibility will involve securing our cloud infrastructure, platform, and sensitive data. This will be achieved through rigorous architecture reviews, the implementation of robust automation strategies, and continuous monitoring to proactively identify and mitigate cloud-specific risks. A significant focus will be placed on Cloud Security best practices and their application within our dynamic environment.
• • You will also own and manage identity and access management (IAM) across all Cohere systems and data. This entails establishing and maintaining strong identity governance, implementing secure authentication mechanisms, and ensuring robust authorization controls for access to applications and critical infrastructure. The goal is to ensure that only authorized personnel have access to the resources they need, thereby minimizing the attack surface.
• • A core function of this role is to detect, analyze, and respond to security threats in real-time. You will be responsible for maintaining comprehensive visibility across the enterprise to identify potential breaches or malicious activities. This proactive stance is crucial for minimizing the business impact of any security incidents.
• • In the event of a security incident, you will lead rapid containment, eradication, and recovery efforts. Your expertise will be vital in minimizing downtime and data loss, ensuring business continuity and maintaining customer trust. This involves developing and refining incident response playbooks and leading the execution of these plans.
• • Beyond technical execution, you will lead and grow a high-performing team of Security Engineers. This includes attracting top talent through effective hiring strategies, fostering their professional development through coaching, and providing mentorship to cultivate a culture of excellence. You will be responsible for building a team that is not only technically proficient but also deeply committed to Cohere's mission.
• • You will foster a strong culture of ownership, innovation, and continuous learning within the security team. This involves empowering team members to take responsibility for their work, encouraging creative problem-solving, and promoting a growth mindset. Establishing and evolving team processes will be key to maximizing productivity and execution speed, ensuring the team operates efficiently and effectively.
• • You will collaborate closely with leadership to prioritize high-impact initiatives and strategic customer engagements, ensuring that security efforts directly support business growth and customer satisfaction. This involves understanding customer security requirements and translating them into actionable security strategies.
• • The role requires a deep understanding of various security domains, including network security, identity governance, infrastructure security, and external attack surface management. You will be expected to be well-versed with industry best practices across these domains and apply them to Cohere's unique environment.
• • You will be comfortable navigating ambiguity, making informed decisions even with limited data, and employing a flexible and constructive approach to problem-solving. This adaptability is crucial in the fast-paced world of AI development.
• • A key aspect of the role involves making strategic trade-offs between build vs. buy decisions for security solutions. You will help build necessary internal solutions while also being adept at evaluating and selecting external tools and services to enhance our security posture.
• • You will possess a strong understanding of secure engineering best practices, enabling you to articulate complex problem statements clearly and propose effective solutions to both technical and non-technical audiences. This communication skill is vital for cross-functional collaboration and stakeholder management.
• • Finally, you will leverage your deep technical understanding of common security vulnerabilities and risks, along with their countermeasures and compensating controls, to build and maintain a resilient security framework for Cohere.