Founding Security Engineer — AI Banking Security

Sarah Smith Fund; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Casca is building AGI for banking and seeks an experienced AppSec engineer to own security across a multi-tenant AI platform. You will develop detections, policy-as-code, and perform threat modeling on auth, data handling, and borrower PII.

You’ll address the AI attack surface, participate in incidents end-to-end, and help bank security reviews translate into engineering work. You will work closely with a team to scale security controls for a bank-grade cloud estate and ensure compliance through

Qualifications

• Several years of experience in application security with verifiable bugs, incidents, and tooling.
• Ability to explain risk to engineers and get fixes shipped without escalations.
• Experience reviewing security in multi-tenant systems and bank-grade data handling.

Responsibilities

• Develop detections, libraries, policy-as-code, and CI/CD checks for security tooling.
• Conduct threat models and design reviews focusing on auth, tenant isolation, and PII handling.
• Address the AI attack surface, including prompt-injection and exfiltration risks.
• Handle end-to-end security incidents, including post-incident write-ups and fixes.
• Support bank security reviews and audits by turning requirements into engineering work.

Skills

AppSec experience

Threat modeling

Security incidents handling

Risk communication

Stakeholder collaboration

Tools

TypeScript/Node.js

Python

Job description

Casca is building AGI for banking and seeks an experienced AppSec engineer to own security across a multi-tenant AI platform. You will develop detections, policy-as-code, and perform threat modeling on auth, data handling, and borrower PII.

You’ll address the AI attack surface, participate in incidents end-to-end, and help bank security reviews translate into engineering work. You will work closely with a team to scale security controls for a bank-grade cloud estate and ensure compliance through