Lead App Security Engineer for AI Platform

Decagon; San Francisco (CA); On-site; USD 200,000 - 400,000; Full time

Benefits offered by this job

Medical, Dental, and Vision

Life Insurance

Retirement Plan

Parental Leave

Fertility benefits

Wellness stipend

Daily lunches and snacks

Generous vacation policy

Job summary

Decagon, a leading conversational AI platform, is hiring a Lead Application Security Engineer to shape security across our enterprise AI-powered platform. You will design controls, perform threat modeling, and drive secure coding practices with engineering teams at scale.

This role focuses on integrating security into the SDLC, building testing programs (SAST/DAST/IAST), and leading security reviews for new features, including AI model integration points and data handling.

Qualifications

• 5+ years hands-on application security engineering experience.
• Expertise in secure software development practices and vulnerability assessment.
• Strong software engineering background across languages and frameworks used in AI/ML.

Responsibilities

• Design and implement application security controls across the AI agent platform.
• Collaborate with product engineering to embed security in the SDLC.
• Establish testing programs: SAST, DAST, IAST tailored for AI apps.
• Lead security code reviews and architecture assessments for new features.
• Build tooling to help developers find and remediate vulnerabilities quickly.
• Coordinate remediation and post-incident improvements for security incidents.

Skills

Security engineering

Threat modeling

Secure code review

Vulnerability assessment

CI/CD integration

AI/ML security

Tools

Semgrep

CodeQL

Cursor Bug Bot

XBOW

Job description

Decagon, a leading conversational AI platform, is hiring a Lead Application Security Engineer to shape security across our enterprise AI-powered platform. You will design controls, perform threat modeling, and drive secure coding practices with engineering teams at scale.

This role focuses on integrating security into the SDLC, building testing programs (SAST/DAST/IAST), and leading security reviews for new features, including AI model integration points and data handling.