Casca - Senior Security Engineer

deCircle; San Francisco (CA); Sur place; USD 190 000 - 250 000; Plein temps

Résumé du poste

Casca is seeking a Founding Security Lead in San Francisco to own and evolve the application security program at our AI-native fintech startup. You’ll be a hands-on IC who grows into technical leadership, focusing on securing AI agents and regulated banking workflows.

With 4–8 years in application security, you’ll build security tooling, drive secure SDLC practices, and partner with engineering to scale security as we move from Series A onward.

Qualifications

• 4-8 years of experience as an application security engineer dealing with rapid growth.
• Strong application security background with a focus on securing AI agents and agentic workflows.
• Tech stack: TypeScript, JavaScript, AWS, GCP, DevSecOps, Secure SDLC, Threat Modeling, Application Security, IAM, SOC 2, ISO 27001, AI/LLM Security

Responsabilités

• Own and mature the application security program with secure SDLC practices.
• Secure the AI agent execution surface and data privacy.
• Automate security processes and vulnerability management.
• Lead incident response as primary incident commander.
• Support SOC 2, ISO 27001, and bank security requirements.

Connaissances

App security

Threat modeling

DevSecOps

Secure SDLC

Incident response

Outils

AWS

GCP

TypeScript

JavaScript

IAM

SOC 2

ISO 27001

AI/LLM Security

Description du poste

Location: San Francisco, CA (On-site, 5 days in-office)
Salary: $190K-$250K base + competitive equity (higher for exceptional candidates)
Visa: Open to visa transfers (e.g. OPT, H1B transfers)

About this role

We are looking for a Founding Security Lead with 4-8 years of experience to own and evolve the application security program at a fast-growing AI-native fintech startup. You'll be a \"super IC\" - someone who thrives doing hands-on security work while naturally growing into technical leadership. This role is ideal for someone with a strong application security background who is passionate about securing AI agents and agentic workflows in a highly regulated banking environment. You'll join an existing security foundation and take it to the next level as the company scales from Series A through its next phase of growth.

What you will be doing

• Owning and maturing the application security program - building security tooling, processes, and secure SDLC practices that integrate naturally into how engineers ship code

• Securing the AI agent execution surface - partnering with engineering to establish robust security architecture for agentic workflows, ensuring data privacy and mitigating AI-specific vulnerabilities

• Driving automation of security processes - building detection pipelines, automating vulnerability management, and reducing manual security overhead

• Leading incident response - acting as primary incident commander and turning every event into systemic improvements

• Supporting compliance and customer trust initiatives - contributing to SOC 2, ISO 27001, and bank-driven security requirements

About Casca

Casca is building AGI for banking, replacing decades-old legacy systems with AI-native technology that automates 90% of manual work. Founded 2023 by banking and ML experts from Stanford; backed by Peterson Ventures, Y Combinator, The Sarah Smith Fund and Clocktower Technology Ventures. 45 employees, $33M total funding. www.cascading.ai

• 4-8 years of experience as an application security engineer dealing with rapid growth

• Strong application security background; passion for securing AI agents and agentic workflows

• Tech stack: TypeScript, JavaScript, AWS, GCP, DevSecOps, Secure SDLC, Threat Modeling, Application Security, IAM, SOC 2, ISO 27001, AI/LLM Security