# Senior Software Engineer, Application Security

**Company:** [Decagon](https://hotfix.jobs/companies/decagon)
**Location:** San Francisco, CA, New York, NY
**Role:** Security Engineering
**Salary:** $200k – $330k/yr
**Experience:** 5+ years
**Skills:** Application Security, Threat Modeling, Secure Code Review, Vulnerability Management, SAST, DAST, Iast, CI/CD, Owasp Top 10, GCP, Container Security, Semgrep, Codeql, Prompt Injection, Model Extraction
**Posted:** 2026-07-29

> Leads application security strategy and implementation for an AI-powered conversational platform, partnering with engineering teams on secure development, testing, code reviews, vulnerability remediation, and incident response. Requires 5+ years of application security experience and strong software engineering expertise.

## Job Description

## Responsibilities
- Design and implement application security controls across an AI agent platform, including secure coding practices, threat modeling, and vulnerability management.
- Collaborate with product engineering teams to integrate security throughout the software development lifecycle, from design and coding through pull requests and deployment.
- Establish application security testing programs, including static analysis (SAST), dynamic analysis (DAST), and interactive testing (IAST) tailored to AI applications.
- Lead security code reviews and architecture assessments, focusing on AI model integration points and customer data handling.
- Build security tooling and automation to help developers identify and remediate vulnerabilities quickly while maintaining development velocity.
- Respond to security incidents involving application vulnerabilities and coordinate remediation and post-incident improvements.

## Requirements
- 5+ years of hands-on application security engineering experience.
- Expertise in secure software development, threat modeling, secure code review, and vulnerability assessment.
- Strong software engineering background with the ability to review code across multiple languages and frameworks used in AI/ML applications.
- Experience implementing application security testing tools and integrating security into CI/CD pipelines.
- Knowledge of the OWASP Top 10, common application vulnerabilities, and modern application security frameworks.
- Proven ability to work with engineering teams to remediate security findings while balancing security and business requirements.

## Nice-to-Haves
- Experience securing AI/ML applications, including prompt injection, model extraction, and adversarial input protections.
- Experience with large-scale, multi-tenant SaaS applications handling sensitive customer data.
- Familiarity with Google Cloud application security services and container security best practices.
- Knowledge of SOC 2, ISO 27001, and GDPR compliance requirements from an application security perspective.
- Experience with Semgrep, CodeQL, Cursor Bug Bot, XBOW, or similar security tools.

## Compensation and Benefits
- $200,000–$330,000 plus equity.
- Medical, dental, and vision benefits for employees and families.
- Life insurance and disability benefits.
- Retirement plan.
- Parental leave.
- Fertility and family-building benefits.
- Monthly wellness and lifestyle stipend.
- Daily office lunches and snacks.
- Flexible vacation policy.

## Similar jobs

- [Senior Software Engineer - Cloud Security](https://hotfix.jobs/jobs/4c2da306-e1e5-4a5f-9bd4-1504301784bc) - Snowflake - Menlo Park, CA - $200k – $288k/yr
- [Senior Manager - Network and Information Security](https://hotfix.jobs/jobs/9c9131aa-32b1-4bfe-baa8-f13261274796) - Atomicmachines - Emeryville, CA - $200k – $280k/yr
- [Senior Detection and Response Engineer](https://hotfix.jobs/jobs/ebb8ac3d-4282-4505-bdb8-4699d594df80) - Anyscale - $200k – $240k/yr
- [Senior Cloud Security Engineer](https://hotfix.jobs/jobs/7de4a9fc-5b59-40cc-b0f8-5573944d9ab3) - Anyscale - San Francisco, CA - $200k – $240k/yr
- [Senior Platform Security Engineer](https://hotfix.jobs/jobs/3ac667bf-62fa-4280-8ccb-2af3468d8579) - Discord - $196k – $245k/yr

**Apply:** https://hotfix.jobs/jobs/29da044b-98c5-418e-b90c-dfb72df94785
**Canonical:** https://hotfix.jobs/jobs/29da044b-98c5-418e-b90c-dfb72df94785