3 months ago
Base Salary
$200k - $330k/yr
Responsibilities
- Design and implement application security controls across the AI agent platform, including secure coding practices, threat modeling, and vulnerability management.
- Integrate application security throughout the software development lifecycle in partnership with product engineering teams.
- Establish SAST, DAST, and IAST testing programs tailored for AI applications.
- Lead security code reviews and architecture assessments, especially for AI model integrations and customer data handling.
- Build security tooling and automation to help developers identify and remediate vulnerabilities.
- Respond to application security incidents and coordinate remediation and post-incident improvements.
Requirements
- 5+ years of hands-on application security engineering experience.
- Expertise in secure software development, threat modeling, secure code review, and vulnerability assessment.
- Strong software engineering background with the ability to review code across multiple languages and frameworks used in AI/ML applications.
- Experience implementing application security testing tools and integrating security into CI/CD pipelines.
- Knowledge of the OWASP Top 10, common application vulnerabilities, and modern application security frameworks.
- Track record of working with engineering teams to remediate security findings while balancing security and business requirements.
- Preferred experience securing AI/ML applications against prompt injection, model extraction, and adversarial inputs.
- Preferred background with large-scale, multi-tenant SaaS applications handling sensitive customer data.
- Familiarity with Google Cloud application security services and container security best practices is preferred.
- Knowledge of SOC 2, ISO 27001, and GDPR compliance requirements from an application security perspective is preferred.
- Familiarity with Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar security tools is preferred.
Benefits
- Medical, dental, and vision benefits for employees and families.
- Life insurance and disability benefits.
- Retirement plan, such as a 401K or pension.
- Parental leave.
- Fertility and family-building benefits through Carrot.
- Monthly wellness and lifestyle stipend.
- Daily lunches and snacks in the office.
- Take-what-you-need vacation policy; UK employees receive 25 days of statutory leave.
- Full-time, in-office work arrangement.
Tech Stack
Google Cloud
Categories
About Decagon
Decagon builds an enterprise conversational AI platform that deploys customer-support agents across voice, chat, email, SMS, and other channels. It sells to large brands via enterprise subscriptions and services, helping automate and personalize support workflows. Founded in 2023 and headquartered in San Francisco, Decagon’s customers include Avis Budget Group, Chime, Oura Health, and 1-800-Flowers.