Senior App Sec Engineer — AI Platform, Equity

Apply; New York, Northern (NY, KY); Hybrid; USD 200,000 - 400,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life Insurance

Retirement Plan

Parental Leave

Wellness stipend

Daily lunches

Flexible vacation

Job summary

Decagon, the leading conversational AI security platform, seeks a hands-on Security Engineer to lead application security for enterprise AI services. You will partner with engineering to embed security into AI-powered applications and protect customer data.

You will design controls, run SAST/DAST/IAST, perform threat modeling, review code, and drive secure development across the lifecycle. NYC-based role with equity and rapid growth.

Qualifications

• Requires 5+ years hands-on application security engineering experience.
• Expertise in secure software development practices and vulnerability assessment.
• Strong ability to review code across languages and AI/ML frameworks.
• Experience implementing security testing tools and integrating security into CI/CD pipelines.
• Knowledge of OWASP Top 10 and modern security frameworks.

Responsibilities

• Design and implement application security controls across the AI agent platform.
• Collaborate with product engineering to embed security in the SDLC.
• Establish app security testing programs (SAST, DAST, IAST).
• Lead security code reviews and architecture assessments for new features.
• Build tooling and automation to identify and remediate vulnerabilities quickly.
• Respond to security incidents and coordinate remediation.

Skills

5+ years security engineering

Threat modeling

Secure coding

Vulnerability assessment

CI/CD security

OWASP Top 10

AI/ML security

Tools

SAST

DAST

IAST

Semgrep

CodeQL

Container security

Job description

Decagon, the leading conversational AI security platform, seeks a hands-on Security Engineer to lead application security for enterprise AI services. You will partner with engineering to embed security into AI-powered applications and protect customer data.

You will design controls, run SAST/DAST/IAST, perform threat modeling, review code, and drive secure development across the lifecycle. NYC-based role with equity and rapid growth.