Founding Security Engineer

About the role

Casca is building AGI for banking, replacing legacy systems with AI‑native technology. Security is a precondition for the company’s existence, as every deal depends on rigorous security reviews and any breach would end the business.

Key responsibilities

• Build guardrails, defaults, and tooling that scale across a multi‑tenant AI platform.
• Develop software detections, libraries, policy‑as‑code, automation, and CI/CD checks as production services.
• Conduct design reviews and threat modeling for authentication, tenant isolation, data handling, and borrower PII.
• Address AI attack surface issues such as prompt injection, tool‑use abuse, and exfiltration paths, and evaluate control effectiveness.
• Lead end‑to‑end incident response, including write‑ups and remediation.
• Translate bank security reviews and audits into engineering improvements rather than paperwork.

Required profile

• Several years of application security experience with concrete examples of bugs, incidents, hardened systems, and shipped tooling.
• Ability to write production code in TypeScript/Node.js and Python.
• Deep understanding of security boundaries in multi‑tenant systems, especially authorization.
• Strong communication skills to explain risk to engineers and interact confidently with bank security teams.
• Steady under incident pressure and focused on building leverage rather than becoming a bottleneck.

Required skills

• TypeScript
• Node.js
• Python
• Application security (AppSec)

What we offer

• Impactful ownership shaping AI‑driven banking.
• Collaborative environment with continuous improvement and knowledge sharing.
• Competitive compensation including salary, benefits, and potential equity.
• Professional growth with mentorship and resources.
• Culture of innovation encouraging risk‑taking and learning.