Decagon
Senior Software Engineer, Application Security
$200K–$400K
San Francisco +1 · Senior · Full-time · Posted Sep 21, 2026
- Location
- San Francisco
New York City - Experience
- 5+ years of hands-on application security engineering experience.
About the job
Leads application security strategy and implementation for Decagon’s conversational AI platform, protecting enterprise applications and customer data while supporting reliable development.
What you'll do
- Design and implement application security controls, including secure coding practices, threat modeling, and vulnerability management.
- Integrate security throughout the software development lifecycle and establish SAST, DAST, and IAST testing programs.
- Lead security code reviews and architecture assessments, build security automation, and coordinate vulnerability incident response.
What they ask for
- 5+ years of hands-on application security engineering experience.
- Expertise in secure software development practices, including threat modeling, secure code review, and vulnerability assessment.
- Strong software engineering background and ability to review code across multiple languages and frameworks.
- Experience implementing application security testing tools and integrating security into CI/CD pipelines.
Nice to have
- Experience securing AI/ML applications or large-scale, multi-tenant SaaS applications handling sensitive customer data.
- Familiarity with Google Cloud application security services, container security, enterprise compliance requirements, or tools such as Semgrep and CodeQL.
Pay
$200K – $400K (base salary; compensation type not stated)
Tools
SAST, DAST, IAST, CI/CD, Google Cloud, Semgrep, CodeQL, Cursor Bug Bot
AI focus
Secures AI applications, with preferred experience addressing prompt injection, model extraction, and adversarial inputs; reviews AI model integration points and customer data handling.
Model-written summary · the original posting is authoritative