Staff Software Engineer, Platform Security

About Decagon

Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences.

About the Team

The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email, and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale.

About the Role

We're hiring our founding Platform Engineer, Security to design, build, and operate the security infrastructure that powers Decagon's AI platform. This is a builder's role: you'll spend your time creating durable, well-engineered systems including paved paths for secure service creation, security tooling that automatically applies secure configurations, and infrastructure-as-code that makes it easy for every engineer at Decagon to do the right thing.

In this role, you will

• Design and implement secure, multi-tenant infrastructure that isolates customer data while enabling efficient AI model serving across our platform
• Build "golden paths" for security including service templates, libraries, terraform policies, and automation, so new services are secure and production-ready by default
• Own infrastructure-as-code (Terraform) and GitOps best practices, including reusable modules and policy-as-code
• Expand and help operate the platforms behind alerting detection, secrets management, IAM, and automated remediation, integrating them cleanly into CI/CD and developer workflows
• Partner with Security, Infrastructure, and product engineering teams to translate enterprise and compliance requirements (SOC 2, ISO 27001, GDPR) into reliable, automated technical controls
• Participate in security on-call and continuously raise the bar on operability, runbooks, and incident learnings

Your background looks something like this

• 8+ years building and operating production infrastructure, with meaningful exposure to security or a strong interest in moving deeper into security problems
• Deep knowledge of Google Cloud Platform and/or AWS, including compute, networking, IAM, and security services
• Proficiency with infrastructure-as-code (Terraform, Ansible, or similar) and a track record of building developer-facing tooling and automation
• Strong coding ability in at least one systems language (eg. Python, Go, TypeScript) and comfort building paved-path tooling teams actually adopt
• Experience applying AI-assisted tooling (Cursor, Claude Code, and similar) to make engineers dramatically more effective
• Experience with secure container deployment, service mesh, and Kubernetes security best practices
• Observability and incident-response tooling experience (instrumentation, alerting, dashboards), with a bias toward eliminating toil
• Clear written communication and the ability to turn ambiguous requirements into simple, reliable designs

Even better if you have

• A track record of being an early or founding platform/infrastructure/security engineer at another company
• Experience building internal platforms: service templates, paved-road deployment, self-serve environments, or developer portals
• A security-minded approach to the software supply chain (provenance, secrets, least privilege) and familiarity with static analysis tooling (Semgrep, CodeQL)
• Experience with detection and response data pipelines (Kafka/Pulsar, Splunk/Panther/RunReveal, or similar)
• Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR) from an infrastructure and platform perspective