Staff Software Engineer, Platform Security

San Francisco · New York City · USD 200,000-400,000 · 8+ years experience · Full-time · Hybrid · Posted Sep 28, 2026

At a glance

Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences.
Our technology enables industry-defining enterprises like Avis Budget Group, Block’s Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel.
We’re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We’re proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others.
We’re an in-office company, driven by a shared commitment to excellence and velocity. Our values — Just Get It Done, Invent What Customers Want, Winner’s Mindset, and The Polymath Principle — shape how we work and grow as a team.

Decagon is hiring a Staff Software Engineer, Platform Security to design, build, and operate the security infrastructure that powers its AI platform.
This is a founding builder's role where you will create durable, well-engineered systems, secure service templates, and infrastructure-as-code.
The role sits at the intersection of Security and Infrastructure, directly unlocking high-value enterprise deals by maintaining the highest standards of security and privacy.

Design and implement secure, multi-tenant infrastructure that isolates customer data while enabling efficient AI model serving across our platform
Build "golden paths" for security including service templates, libraries, terraform policies, and automation, so new services are secure and production-ready by default
Own infrastructure-as-code (Terraform) and GitOps best practices, including reusable modules and policy-as-code
Expand and help operate the platforms behind alerting detection, secrets management, IAM, and automated remediation, integrating them cleanly into CI/CD and developer workflows
Partner with Security, Infrastructure, and product engineering teams to translate enterprise and compliance requirements (SOC 2, ISO 27001, GDPR) into reliable, automated technical controls
Participate in security on-call and continuously raise the bar on operability, runbooks, and incident learnings

8+ years building and operating production infrastructure, with meaningful exposure to security or a strong interest in moving deeper into security problems
Deep knowledge of Google Cloud Platform and/or AWS, including compute, networking, IAM, and security services
Proficiency with infrastructure-as-code (Terraform, Ansible, or similar) and a track record of building developer-facing tooling and automation
Strong coding ability in at least one systems language (eg. Python, Go, TypeScript) and comfort building paved-path tooling teams actually adopt
Experience applying AI-assisted tooling (Cursor, Claude Code, and similar) to make engineers dramatically more effective
Experience with secure container deployment, service mesh, and Kubernetes security best practices
Observability and incident-response tooling experience (instrumentation, alerting, dashboards), with a bias toward eliminating toil
Clear written communication and the ability to turn ambiguous requirements into simple, reliable designs

Show all 15 skills