5 months ago
Base Salary
$200k - $330k/yr
Responsibilities
- Design and implement application security controls across the AI agent platform, including secure coding practices, threat modeling, and vulnerability management
- Partner with product engineering teams to integrate security throughout design, coding, pull requests, and deployment
- Establish SAST, DAST, and IAST programs tailored for AI applications
- Lead security code reviews and architecture assessments, focusing on AI model integrations and customer data handling
- Build security tooling and automation to help developers identify and remediate vulnerabilities quickly
- Respond to application vulnerability incidents and coordinate remediation and post-incident improvements
Requirements
- 3–5 years of hands-on application security engineering experience
- Expertise in secure software development, threat modeling, secure code review, and vulnerability assessment
- Strong software engineering background with the ability to review code across multiple languages and frameworks used in AI/ML applications
- Experience implementing application security testing tools and integrating security into development pipelines
- Knowledge of the OWASP Top 10, common application vulnerabilities, and modern application security frameworks
- Proven ability to work with engineering teams to remediate security findings while balancing security and business requirements
- Preferred experience securing AI/ML applications, including prompt injection, model extraction, and adversarial input protections
- Preferred experience with large-scale, multi-tenant SaaS applications handling sensitive customer data
- Familiarity with Google Cloud application security services and container security best practices
- Knowledge of SOC 2, ISO 27001, and GDPR from an application security perspective
- Experience with Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar security tools
Benefits
- Take-what-you-need vacation policy; UK employees receive 25 days of statutory leave
- Medical, dental, and vision benefits for employees and families
- Life insurance and disability benefits
- Retirement plan, such as a 401(k) or pension
- Parental leave
- Fertility and family-building benefits through Carrot
- Daily lunches and snacks in the office
- Full-time, in-office work arrangement
Tech Stack
Google Cloud
Categories
About Decagon
Decagon builds an enterprise conversational AI platform that deploys customer-support agents across voice, chat, email, SMS, and other channels. It sells to large brands via enterprise subscriptions and services, helping automate and personalize support workflows. Founded in 2023 and headquartered in San Francisco, Decagon’s customers include Avis Budget Group, Chime, Oura Health, and 1-800-Flowers.