Casca

Senior Security Engineer

San Francisco. Posted a month ago

The role

You will build security guardrails, defaults, and tooling for a multi-tenant AI platform. You will own software like detections and policy-as-code, perform design reviews, and manage the AI attack surface and incidents.

What you will do

  • Develop software including detections, libraries, policy-as-code, automation, and CI/CD checks.
  • Conduct design reviews and threat models on auth, tenant isolation, and data handling.
  • Manage the AI attack surface including prompt injection, tool-use abuse, and exfiltration paths.
  • Handle incidents end to end, including write-ups and fixes.
  • Manage bank security reviews and audits by turning them into engineering work.

Required qualifications

  • Several years of experience in AppSec.
  • Write production code.
  • Proficiency in TypeScript/Node.js and Python.
  • Knowledge of security boundaries in multi-tenant systems and authorization.
  • Ability to explain risk to an engineer in engineering terms.
  • Ability to interface with a bank's security team.
  • Ability to remain steady during incidents.

Nice to have

  • Securing LLM or agentic products in production.
  • Standing up a security function at a fast-growing company.
  • Working inside or selling into regulated financial institutions: SOC 2, GLBA, FFIEC guidance, third-party risk, exam support.

Benefits

  • Impact & Ownership: A unique opportunity to shape the future of banking through AI, owning end-to-end product initiatives.
  • Collaborative Environment: Work alongside a talented and passionate team that values continuous improvement and knowledge sharing.
  • Competitive Compensation: Includes salary, benefits, and potential equity in a fast-growing startup.
  • Professional Growth: Access to resources and mentorship to expand your skill set, influence strategy, and accelerate your career.
  • Culture of Innovation: We encourage risk-taking, learning from failures, and pushing the boundaries of what is possible in fintech.

About the company

Casca is building AGI for banking. They are replacing legacy systems with AI-native technology that automates manual work.