Decagon
Software Engineer, Platform Security
$200K–$330K
San Francisco · Full-time · Posted Jun 5, 2026
- Experience
- 3-5 years of hands-on application security engineering experience.
About the job
Leads application security strategy and implementation for Decagon’s conversational AI platform, protecting applications and customer data while supporting reliable development.
What you'll do
- Design application security controls, including secure coding practices, threat modeling, and vulnerability management.
- Integrate security into the software development lifecycle and establish SAST, DAST, and IAST testing programs.
- Lead security reviews, build developer security tooling, and respond to application security incidents.
What they ask for
- Expertise in secure software development, threat modeling, secure code review, and vulnerability assessment.
- Strong software engineering background and ability to review code across multiple languages and frameworks.
- Experience implementing application security testing tools and integrating security into CI/CD pipelines.
- Knowledge of OWASP Top 10, common application vulnerabilities, and modern application security frameworks.
Nice to have
- Experience securing AI/ML applications or large-scale, multi-tenant SaaS handling sensitive data.
- Familiarity with Google Cloud application security, container security, compliance requirements, or tools such as Semgrep and CodeQL.
Pay
$200K – $330K USD base salary
Tools
SAST, DAST, IAST, CI/CD, Google Cloud, Semgrep, CodeQL, Cursor Bug Bot
AI focus
Secures AI applications and model integration points; preferred experience includes protections against prompt injection, model extraction, and adversarial inputs.
Model-written summary · the original posting is authoritative