Cloud Security Engineer (Kubernetes, Remote-First)

Cast AI; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity options

Learning & development budget

Equipment budget

Extra time off and company events

Job summary

CAST AI is hiring its first dedicated Security Engineer. This remote-first role focuses on understanding the security of our platform, identifying high-impact risks, and guiding engineering teams to address them.

You will work across AWS, GCP and Azure, Kubernetes environments, CI/CD pipelines and AI agents making autonomous decisions in production. This is a technical, hands-on individual contributor position reporting to the security lead.

Qualifications

• 5–6 years of professional security experience; around 10 years ideal.
• Hands-on experience with cloud security tooling in production (e.g., Wiz, Upwind) and translating findings into fixes.

Responsibilities

• Learn CAST AI’s architecture, infrastructure and engineering workflows; identify security flaws and material risks.
• Set up and tune cloud security tooling to produce high-signal findings for engineering action.
• Build threat models for product and backend architecture, including trust boundaries and service-to-service authentication.
• Assess findings using evidence and business impact; present risks to leadership and drive mitigation.
• Drive implementation of security controls across engineering (production access, identity, secrets, CI/CD).
• Translate compliance requirements into technical work and evidence; contribute to security standards.

Skills

Cloud security tooling

Kubernetes security

Threat modelling

Go or Python

English communication

Security architecture

Identity and secrets management

SOC2/ISO27001 familiarity

CI/CD security

Terraform

Tools

Wiz

Terraform

Go

Python

Kubernetes

Job description

CAST AI is hiring its first dedicated Security Engineer. This remote-first role focuses on understanding the security of our platform, identifying high-impact risks, and guiding engineering teams to address them.

You will work across AWS, GCP and Azure, Kubernetes environments, CI/CD pipelines and AI agents making autonomous decisions in production. This is a technical, hands-on individual contributor position reporting to the security lead.