Founding AppSec Engineer for AI Banking Platform

Cascading AI Inc.; San Francisco (CA); Híbrido; USD 150.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Impact & Ownership

Collaborative Environment

Competitive Compensation

Professional Growth

Culture of Innovation

Descripción de la vacante

Casca is building AGI for banking and is focused on security-first engineering across a multi-tenant cloud platform. As an AppSec-focused engineer, you will own detections, policy-as-code, and CI/CD checks, while shaping threat models around authentication, tenant isolation, and data handling.

You will address the AI attack surface and oversee incidents from discovery to remediation. You will collaborate with the engineering team, communicate risk in concrete terms to developers, and work with

Formación

• Several years of AppSec experience with bugs you found, incidents you ran, and systems you hardened.
• You write production code in TypeScript/Node.js and Python.
• You know where security boundaries break in multi-tenant systems, and why authorization matters.
• You can explain risk to an engineer in engineering terms and ship fixes without escalation.
• You can face a bank's security team and leave them more confident.

Responsabilidades

• Own software security controls: detections, libraries, policy-as-code, automation, and CI/CD checks.
• Create threat models and design reviews focusing on auth, tenant isolation, and data handling.
• Address AI attack surface: prompt injection, tool abuse, exfiltration paths, and evaluation of controls.
• Manage end-to-end incident response, write-ups, and post-incident fixes.
• Support bank security reviews and audits by turning findings into engineering work.

Conocimientos

AppSec experience

TypeScript/Node.js

Python

Multi-tenant security

Herramientas

CI/CD tooling

Descripción del empleo

Casca is building AGI for banking and is focused on security-first engineering across a multi-tenant cloud platform. As an AppSec-focused engineer, you will own detections, policy-as-code, and CI/CD checks, while shaping threat models around authentication, tenant isolation, and data handling.

You will address the AI attack surface and oversee incidents from discovery to remediation. You will collaborate with the engineering team, communicate risk in concrete terms to developers, and work with