Decagon
Software Engineer, Platform Security
About this role
Decagon seeks a Platform Engineer for Security to lead application security strategy across their conversational AI platform serving enterprise customers. You'll design security controls, integrate security into the development lifecycle, and establish testing programs while protecting sensitive customer data at scale.
What you'll do
- Design and implement application security controls including secure coding practices, threat modeling, and vulnerability management
- Collaborate with product engineering teams to integrate security throughout the software development lifecycle
- Establish application security testing programs (SAST, DAST, IAST) tailored for AI applications
- Lead security code reviews and architecture assessments with focus on AI model integration and data handling
- Build security tooling and automation to enable developers to identify and remediate vulnerabilities quickly
- Respond to security incidents involving application vulnerabilities and coordinate remediation efforts
What they're looking for
- Application security engineering (3-5 years)
- Secure software development practices and threat modeling
- Code review across multiple languages and AI/ML frameworks
- Application security testing tools and CI/CD pipeline integration
- OWASP Top 10 and vulnerability assessment knowledge
- AI/ML security (prompt injection, model extraction, adversarial inputs)
- Google Cloud and container security
- Modern security tools (Semgrep, CodeQL, etc.)
Opens the official application on the employer’s site. No login required.
Decagon
Decagon builds enterprise-grade conversational AI platforms that enable organizations to deploy AI agents for business impact. The company is hiring Strategic Solutions Engineers, Customer Engineers, Platform Engineers, and systems-focused engineers to deliver AI implementations, build internal infrastructure, and establish security practices across their growing platform.
View all jobs at DecagonLikely interview questions
- Walk us through how you'd design and implement application security controls for a multi-tenant conversational AI platform handling sensitive customer data across voice, chat, and email channels.
- Describe your experience with threat modeling and secure code review—what's an example of a critical vulnerability you caught, and how did you work with the engineering team to remediate it?