Lead Platform Security Engineer – AI/ML Systems

Decagon; San Francisco (CA); Hybrid; USD 200,000 - 330,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Life Insurance

Retirement Plan

Parental Leave

Fertility benefits

Wellness stipend

Lunches in office

Vacation policy

Job summary

Decagon is hiring a Senior Application Security Engineer to lead security strategy for our AI-powered enterprise platform.

You will partner with engineering to embed security into the software lifecycle, implement SAST/DAST/IAST, and oversee secure coding practices across multi-language AI applications. This role offers impact across scale and fast-paced innovation.

Join a fast-growing in-office team and help defend customer data while advancing security in AI.

Qualifications

• 3-5 years hands-on application security engineering experience.
• Expertise in secure software development practices, including threat modeling, secure code review, and vulnerability assessment.
• Strong software engineering background with ability to review code across multiple languages and frameworks commonly used in AI/ML applications.
• Experience implementing application security testing tools and integrating security into CI/CD pipelines.
• Knowledge of OWASP Top 10, common application vulnerabilities, and modern application security frameworks.
• Proven track record working with engineering teams to remediate security findings while balancing security and business requirements.

Responsibilities

• Design and implement application security controls across our AI agent platform, including secure coding practices, threat modeling, and vulnerability management.
• Collaborate closely with product engineering teams to integrate security throughout the software development lifecycle, from design, coding, PR, and deployment
• Establish application security testing programs including static analysis (SAST), dynamic analysis (DAST), and interactive testing (IAST) tailored for AI applications
• Lead security code reviews and architecture assessments for new features, with special focus on AI model integration points and customer data handling
• Build security tooling and automation to enable developers to identify and remediate vulnerabilities quickly while maintaining development velocity
• Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements

Skills

Application security

Threat modeling

Secure code review

Vulnerability assessment

CI/CD security

Code review

AI/ML security

Tools

Semgrep

CodeQL

Cursor Bug Bot

XBOW

Job description

Decagon is hiring a Senior Application Security Engineer to lead security strategy for our AI-powered enterprise platform.

You will partner with engineering to embed security into the software lifecycle, implement SAST/DAST/IAST, and oversee secure coding practices across multi-language AI applications. This role offers impact across scale and fast-paced innovation.

Join a fast-growing in-office team and help defend customer data while advancing security in AI.