Senior AI Platform Security Engineer

AI Chopping Block; San Francisco, Northern (CA, KY); Hybrid; USD 170,000 - 305,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Life Insurance/Disability

Retirement Plan

Parental Leave

Fertility benefits

Wellness stipend

Office lunches

Vacation policy

Job summary

Decagon’s Security Engineering team safeguards the AI-powered platform powering enterprise interactions across voice, chat, email, and SMS. The role leads security strategy, implements controls, and partners with engineering to embed security across the software lifecycle.

You will build testing programs (SAST/DAST/IAST), lead code reviews, and ensure data handling remains secure at scale, with a focus on AI/ML components and multi-tenant environments.

Qualifications

• 5+ years hands-on application security engineering experience.
• Expertise in secure software development practices and threat modeling.
• Strong software engineering background with ability to review code across languages/frameworks used in AI/ML applications.
• Experience implementing application security testing tools and integrating security into CI/CD pipelines.
• Knowledge of OWASP Top 10 and common vulnerabilities; familiar with modern security frameworks.
• Proven track record remediating security findings with engineering teams.

Responsibilities

• Design and implement application security controls across the AI agent platform and threat modeling.
• Collaborate with product engineering to integrate security throughout the SDLC from design to deployment.
• Establish AS testing programs including SAST, DAST, and IAST for AI apps
• Lead security code reviews and architecture assessments focused on AI model integration and data handling
• Build tooling to help developers identify and remediate vulnerabilities quickly
• Respond to security incidents and drive post-incident improvements

Skills

Application security

Threat modeling

Secure coding

Vulnerability assessment

CI/CD security

Security reviews

AI/ML security

Cross-language review

Tools

Semgrep

CodeQL

Cursor Bug Bot

XBOW

Job description

Decagon’s Security Engineering team safeguards the AI-powered platform powering enterprise interactions across voice, chat, email, and SMS. The role leads security strategy, implements controls, and partners with engineering to embed security across the software lifecycle.

You will build testing programs (SAST/DAST/IAST), lead code reviews, and ensure data handling remains secure at scale, with a focus on AI/ML components and multi-tenant environments.