Staff Software Engineer, Platform Security

Job summary

Responsibilities

We're hiring our founding Platform Engineer, Security to design, build, and operate the security infrastructure that powers Decagon's AI platform. This is a builder's role: you'll spend your time creating durable, well-engineered systems including paved paths for secure service creation, security…

• Design and implement secure, multi-tenant infrastructure that isolates customer data while enabling efficient AI model serving across our platform
• Build "golden paths" for security including service templates, libraries, terraform policies, and automation, so new services are secure and production-ready by default
• Own infrastructure-as-code (Terraform) and GitOps best practices, including reusable modules and policy-as-code
• Expand and help operate the platforms behind alerting detection, secrets management, IAM, and automated remediation, integrating them cleanly into CI/CD and developer workflows
• Partner with Security, Infrastructure, and product engineering teams to translate enterprise and compliance requirements (SOC 2, ISO 27001, GDPR) into reliable, automated…

What they're looking for

• 8+ years building and operating production infrastructure, with meaningful exposure to security or a strong interest in moving deeper into security problems
• Deep knowledge of Google Cloud Platform and/or AWS, including compute, networking, IAM, and security services
• Proficiency with infrastructure-as-code (Terraform, Ansible, or similar) and a track record of building developer-facing tooling and automation
• Strong coding ability in at least one systems language (eg. Python, Go, TypeScript) and comfort building paved-path tooling teams actually adopt
• Experience applying AI-assisted tooling (Cursor, Claude Code, and similar) to make engineers dramatically more effective

Tech stack

• Terraform
• GCP
• AWS
• Python
• Go
• TypeScript
• Kubernetes
• Kafka