Security Engineer

Security Engineer, AI Platform

About Decagon: Redefining Customer Experiences with AI
Decagon isn't just building AI; we're crafting the future of customer interactions. Our leading conversational AI platform empowers top-tier brands like Avis Budget Group, Block’s Cash App and Square, Chime, Oura Health, and Hunter Douglas to deliver concierge customer experiences at scale. Imagine moving beyond support tickets and hold music to faster resolutions, richer conversations, and deeper relationships – that's the future we're building.
Backed by world-class investors including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, we're driven by a shared commitment to excellence and velocity. Our values – Just Get It Done, Invent What Customers Want, Winner’s Mindset, and The Polymath Principle – define our collaborative, in-office culture in downtown San Francisco.

The Challenge: Securing Next-Gen AI at Scale
The Security Engineering team at Decagon stands at the forefront of a unique challenge: protecting the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email, and SMS. Our mission is critical: to build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale.
We are securing a growing platform where AI and human agents collaborate safely, ensuring the highest standards of security and privacy are maintained. This isn't just about traditional security; it's about pioneering solutions for a new era of intelligent systems.

Your Mission as a Security Engineer
As a Security Engineer, you will be instrumental in building and scaling the security foundations of Decagon's cutting-edge AI customer experience platform. Reporting to the Head of Security, you'll blend hands-on security engineering with robust software development to implement controls, build essential security tooling, and fortify our defenses against modern, AI-enabled threats. This role offers the unique opportunity to maintain an enterprise-ready security and compliance posture within a rapidly evolving AI landscape.
You'll thrive in a collaborative environment, building automated remediation tools, developing sophisticated detection pipelines, and partnering directly with engineering teams to embed security across our entire platform. Join some of the industry's brightest minds and make a tangible impact on the future of AI security.

In this role, you will:

Implement comprehensive security controls across our agent platform, encompassing both application and infrastructure security.
Build innovative security tooling and automation, including automated remediation pipelines, detection systems, and testing frameworks seamlessly integrated into CI/CD workflows.
Partner closely with engineering teams to design and review critical security components such as authentication systems, secrets management, and access controls.
Create scalable detection pipelines capable of monitoring and securing millions of daily AI agent interactions.
Contribute to rapid resolution and maintain service availability during security incidents affecting operations.

What You'll Bring: Your Expertise
Required Qualifications:

3+ years of experience in security engineering, underpinned by strong software engineering fundamentals.
Solid familiarity with application security concepts, including authentication, authorization, vulnerability assessment, and secure development practices.
Demonstrated ability to write production-quality code; you can build the tools and automation the team needs, not just identify problems.
Experience with cloud security fundamentals, ideally within Google Cloud environments.
Exposure to enterprise security requirements such as SOC 2, ISO 27001, or GDPR.
Natural curiosity about new technologies and a proactive approach to solving complex security problems.
Excited to collaborate with bright colleagues in our downtown San Francisco office.

Bonus Points:

Experience building developer tools, security automation, or remediation pipelines.
Background with static analysis tools (e.g., Semgrep, CodeQL) or vulnerability management platforms.
Familiarity with securing AI/ML applications, including an awareness of risks like prompt injection and adversarial inputs.
Experience with infrastructure as code (e.g., Terraform) and modern cloud development practices.
Comfortable working across the entire stack to solve problems and drive security initiatives.

Compensation & Benefits
Salary Range: $200K – $330K + Offers Equity

We proudly offer the following benefits for our full-time employees:

Flexible "take what you need" vacation policy.
Comprehensive Medical, Dental, and Vision benefits for you and your family.
Life Insurance and Disability Benefits.
Retirement Plan (e.g., 401K, pension).
Generous Parental Leave.
Fertility and family building benefits through Carrot.
Daily gourmet lunches and a variety of snacks in the office to keep you energized.

These benefits are described in more detail in Decagon’s policies, may vary by location, and can change at any time according to applicable compensation and benefits plans.