Platform Engineer, Security

About this role

Decagon seeks a Platform Engineer for Security to lead application security strategy across their conversational AI platform serving enterprise customers. You'll design security controls, integrate security into the development lifecycle, and establish testing programs while protecting sensitive customer data at scale.

What you'll do

• Design and implement application security controls including secure coding practices, threat modeling, and vulnerability management
• Collaborate with product engineering teams to integrate security throughout the software development lifecycle
• Establish application security testing programs (SAST, DAST, IAST) tailored for AI applications
• Lead security code reviews and architecture assessments with focus on AI model integration and data handling
• Build security tooling and automation to enable developers to identify and remediate vulnerabilities quickly
• Respond to security incidents involving application vulnerabilities and coordinate remediation efforts

What they're looking for

• Application security engineering (3-5 years)
• Secure software development practices and threat modeling
• Code review across multiple languages and AI/ML frameworks
• Application security testing tools and CI/CD pipeline integration
• OWASP Top 10 and vulnerability assessment knowledge
• AI/ML security (prompt injection, model extraction, adversarial inputs)
• Google Cloud and container security
• Modern security tools (Semgrep, CodeQL, etc.)