Senior Platform Engineer, Security

About the role

We're hiring our founding Platform Engineer, Security to design, build, and operate the security infrastructure that powers Decagon's AI platform. This is a builder's role: you'll spend your time creating durable, well-engineered systems including paved paths for secure service creation, security tooling that automatically applies secure configurations, and infrastructure-as-code that makes it easy for every engineer at Decagon to do the right thing.

Responsibilities

• Design and implement secure, multi-tenant infrastructure that isolates customer data while enabling efficient AI model serving across our platform
• Build "golden paths" for security including service templates, libraries, terraform policies, and automation, so new services are secure and production-ready by default
• Own infrastructure-as-code (Terraform) and GitOps best practices, including reusable modules and policy-as-code
• Expand and help operate the platforms behind alerting detection, secrets management, IAM, and automated remediation, integrating them cleanly into CI/CD and developer workflows
• Partner with Security, Infrastructure, and product engineering teams to translate enterprise and compliance requirements (SOC 2, ISO 27001, GDPR) into reliable, automated technical controls
• Participate in security on-call and continuously raise the bar on operability, runbooks, and incident learnings

Requirements

• 5+ years building and operating production infrastructure, with meaningful exposure to security or a strong interest in moving deeper into security problems
• Deep knowledge of Google Cloud Platform and/or AWS, including compute, networking, IAM, and security services
• Proficiency with infrastructure-as-code (Terraform, Ansible, or similar) and a track record of building developer-facing tooling and automation
• Strong coding ability in at least one systems language (eg. Python, Go, TypeScript) and comfort building paved-path tooling teams actually adopt
• Experience applying AI-assisted tooling (Cursor, Claude Code, and similar) to make engineers dramatically more effective
• Experience with secure container deployment, service mesh, and Kubernetes security best practices
• Observability and incident-response tooling experience (instrumentation, alerting, dashboards), with a bias toward eliminating toil

Qualifications

• Clear written communication and the ability to turn ambiguous requirements into simple, reliable designs

Skills

• Security-minded approach to the software supply chain (provenance, secrets, least privilege)
• Familiarity with static analysis tooling (Semgrep, CodeQL)
• Experience with detection and response data pipelines (Kafka/Pulsar, Splunk/Panther/RunReveal, or similar)
• Knowledge of enterprise compliance requirements (SOC 2, ISO 27001, GDPR) from an infrastructure and platform perspective

Benefits

• Take what you need vacation policy (subject to local requirements; UK employees receive 25 days of statutory leave)
• Medical, Dental, and Vision benefits for you and your family
• Life Insurance and Disability Benefits
• Retail Plan (e.g., 401K, pension)
• Parental Leave
• Fertility and family building benefits through Carrot
• Daily lunches and snacks in the office to keep you at your best