16 hours ago
Base Salary
$180k - $230k/yr
Responsibilities
- Build and deploy security software including detections, libraries, policy-as-code, automation, and CI/CD checks.
- Conduct design reviews and threat modeling for authentication, authorization, tenant isolation, data handling, and borrower PII.
- Secure the AI attack surface, including prompt injection, agent tool-use abuse, data exfiltration, and security evaluations.
- Manage security incidents end to end, including write-ups and remediation.
- Translate bank security reviews, audits, and control requirements into engineering work.
- Build scalable security guardrails, defaults, and tooling for the company’s multi-tenant AI platform and cloud estate.
- Engage directly with bank security teams and explain security risks in practical engineering terms.
Requirements
- Several years of AppSec experience with demonstrated examples of bugs found, incidents managed, systems hardened, and security tooling shipped.
- Ability to write production code; the primary languages and runtime are TypeScript/Node.js and Python.
- Strong understanding of security boundaries in multi-tenant systems, particularly authorization.
- Ability to partner directly with engineers to communicate risk and get fixes shipped.
- Ability to represent the company credibly in conversations with bank security teams.
- Ability to remain steady during incidents and build leverage through scalable security practices.
- Helpful experience includes securing LLM or agentic products in production, standing up a security function, and working with regulated financial institutions.
- Helpful familiarity includes SOC 2, GLBA, FFIEC guidance, third-party risk, and exam support.
Benefits
- Opportunity to shape AI-native banking security with end-to-end ownership.
- Collaborative environment with knowledge sharing and continuous improvement.
- Salary, benefits, and potential equity are offered.
- Professional growth through resources and mentorship.
- High-intensity startup environment with schedules that may require extra focus and flexibility during launches and high-impact sprints.
Tech Stack
Categories
About Casca
Casca builds AI software for banks and fintech lenders to automate small‑business loan origination. Its SaaS AI Loan Assistant collects documents, communicates with applicants via email/SMS, and reduces manual processing in SBA and commercial lending. The privately held company was founded in 2023 and is headquartered in San Francisco, serving FDIC‑insured banks and venture‑backed by investors including Y Combinator.