1 month ago
Base Salary
$200k - $330k/yr
Responsibilities
- Design and implement application security controls across the AI agent platform, including secure coding practices, threat modeling, and vulnerability management.
- Integrate application security throughout the software development lifecycle in partnership with product engineering teams.
- Establish SAST, DAST, and IAST testing programs tailored for AI applications.
- Lead security code reviews and architecture assessments, especially for AI model integrations and customer data handling.
- Build security tooling and automation to help developers identify and remediate vulnerabilities.
- Respond to application security incidents and coordinate remediation and post-incident improvements.
Requirements
- 5+ years of hands-on application security engineering experience.
- Expertise in secure software development, threat modeling, secure code review, and vulnerability assessment.
- Strong software engineering background with the ability to review code across multiple languages and frameworks used in AI/ML applications.
- Experience implementing application security testing tools and integrating security into CI/CD pipelines.
- Knowledge of the OWASP Top 10, common application vulnerabilities, and modern application security frameworks.
- Track record of working with engineering teams to remediate security findings while balancing security and business requirements.
- Preferred experience securing AI/ML applications against prompt injection, model extraction, and adversarial inputs.
- Preferred background with large-scale, multi-tenant SaaS applications handling sensitive customer data.
- Familiarity with Google Cloud application security services and container security best practices is preferred.
- Knowledge of SOC 2, ISO 27001, and GDPR compliance requirements from an application security perspective is preferred.
- Familiarity with Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar security tools is preferred.
Benefits
- Medical, dental, and vision benefits for employees and families.
- Life insurance and disability benefits.
- Retirement plan, such as a 401K or pension.
- Parental leave.
- Fertility and family-building benefits through Carrot.
- Monthly wellness and lifestyle stipend.
- Daily lunches and snacks in the office.
- Take-what-you-need vacation policy; UK employees receive 25 days of statutory leave.
- Full-time, in-office work arrangement.
Tech Stack
Google Cloud
Categories
About Decagon
Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences. Our technology enables industry-defining enterprises like Avis Budget Group, Chime, Oura Health, 1-800-FLOWERS.COM, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel. We’re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships.