4 months ago
Base Salary
$200k - $330k/yr
Responsibilities
- Design and implement application security controls across the AI agent platform, including secure coding practices, threat modeling, and vulnerability management
- Partner with product engineering teams to integrate security throughout the software development lifecycle from design and coding through pull requests and deployment
- Establish SAST, DAST, and IAST application security testing programs tailored for AI applications
- Lead security code reviews and architecture assessments with focus on AI model integration points and customer data handling
- Build security tooling and automation that helps developers identify and remediate vulnerabilities quickly
- Respond to application vulnerability incidents and coordinate remediation and post-incident improvements
Requirements
- 5+ years of hands-on application security engineering experience
- Expertise in secure software development, threat modeling, secure code review, and vulnerability assessment
- Strong software engineering background with the ability to review code across multiple languages and frameworks used in AI/ML applications
- Experience implementing application security testing tools and integrating security into development pipelines
- Knowledge of OWASP Top 10, common application vulnerabilities, and modern application security frameworks
- Proven ability to work with engineering teams to remediate security findings while balancing security and business requirements
- Preferred experience securing AI/ML applications, including prompt injection, model extraction, and adversarial input protections
- Preferred background with large-scale, multi-tenant SaaS applications handling sensitive customer data
- Familiarity with Google Cloud application security services and container security best practices
- Knowledge of SOC 2, ISO 27001, and GDPR from an application security perspective
- Familiarity with Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar security tools
Benefits
- Take-what-you-need vacation policy; UK employees receive 25 days of statutory leave
- Medical, dental, and vision benefits for employees and families
- Life insurance and disability benefits
- Retirement plan, such as a 401K or pension
- Parental leave
- Fertility and family-building benefits through Carrot
- Daily lunches and snacks in the office
- In-office work arrangement
Tech Stack
Google Cloud
Categories
About Decagon
Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences. Our technology enables industry-defining enterprises like Avis Budget Group, Chime, Oura Health, 1-800-FLOWERS.COM, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel. We’re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships.