Senior Software Engineer, Application Security
Decagon · San Francisco
About this role
## Senior Software Engineer, Application Security ### About Decagon Decagon is a conversational AI platform enabling brands to deliver concierge customer experiences. Our technology helps enterprise teams deploy AI agents that power personalized interactions across voice, chat, email, SMS, and more. ### About the Team The Security Engineering team protects the platform powering advanced conversational AI agents for enterprise customers. We build security foundations that help AI agents handle sensitive customer data with trust, while defending against sophisticated, AI-enabled threats at massive scale. ### About the Role Lead application security strategy and implementation for Decagon’s conversational AI platform serving enterprise customers at scale. Partner with engineering teams to build security into AI-powered applications—protecting against application-layer threats while maintaining performance and reliability. ### What You’ll Do - Design and implement application security controls across the AI agent platform (secure coding practices, threat modeling, vulnerability management) - Collaborate with product engineering to integrate security throughout the SDLC (design, coding, PR, deployment) - Establish application security testing programs, including SAST, DAST, and IAST tailored for AI applications - Lead security code reviews and architecture assessments for new features (focus on AI model integration points and customer data handling) - Build security tooling and automation to help developers identify and remediate vulnerabilities quickly without slowing delivery - Respond to security incidents involving application vulnerabilities, coordinating remediation and post-incident improvements ### Your Background - 5+ years of hands-on application security engineering experience - Expertise in secure software development (threat modeling, secure code review, vulnerability assessment) - Strong software engineering background; able to review code across multiple languages/frameworks used in AI/ML - Experience implementing application security testing tools and integrating security into CI/CD - Knowledge of OWASP Top 10, common application vulnerabilities, and modern application security frameworks - Proven track record working with engineering teams to remediate findings while balancing security and business needs ### Even Better - Experience securing AI/ML applications (prompt injection, model extraction, adversarial input protections) - Background with large-scale, multi-tenant SaaS handling sensitive customer data - Familiarity with Google Cloud application security services and container security best practices - Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR) from an application security perspective - Experience with modern security tools (e.g., Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar) ### Compensation & Benefits - **Compensation:** $200K - $400K + Offers Equity - Medical, Dental, and Vision - Life Insurance and Disability Benefits - Retirement Plan (e.g., 401K, pension) - Parental Leave - Fertility and family building benefits (Carrot) - Monthly wellness/lifestyle stipend - Daily lunches and snacks in the office - Take-what-you-need vacation policy (subject to local requirements; UK employees receive 25 days statutory leave) *Benefits may vary by location and can change according to applicable compensation and benefits plans.*
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.