{"id":959411,"url":"https://alion.io/job/casca-founding-security-engineer","title":"Senior Security Engineer","company":{"id":173889,"name":"Casca","domain":"cascading.ai","url":"https://alion.io/company/casca","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Tool Use","optional":false},{"name":"TypeScript","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-09-16T08:10:55Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-15T15:41:06Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"Why Casca?\nCasca is building AGI for banking. We’re replacing decades-old legacy systems with AI-native technology that automates 90% of the manual work humans once had to do.\nWhy this role exists\nOur customers are FDIC-insured banks. Every one of them puts us through security review, control questionnaires, pen test results, and third-party risk assessment before we touch production. Then they hand us borrower tax returns, bank statements, and the data behind credit decisions on their own balance sheet.\nSo security isn't a compliance checkbox here. It's a precondition for the company existing. Every deal we win depends on it, and one bad breach ends the business.\nThe surface area is large and getting larger: a multi-tenant AI platform, a cloud estate under bank data-handling requirements, agents that read and act on customer data, and an engineering team shipping into all of it every day. Nobody can review their way across that. You build the guardrails, defaults, and tooling that scale past you.\nWhat you'll own\nSoftware. Detections, libraries, policy-as-code, automation, CI/CD checks - reviewed, tested, and deployed like any other service.\n\nDesign reviews and threat models on what actually matters: auth, tenant isolation, data handling, anything touching borrower PII.\n\nThe AI attack surface. Prompt injection, tool-use abuse, exfiltration paths through agents, and the evals that tell you whether your controls hold.\n\nIncidents, end to end, including the write-up and the fixes that follow.\n\nBank security reviews and audits, turned into engineering work that improves the system rather than paperwork that describes it.\n\nWhat we look for\nSeveral years of experience in AppSec, with specifics you can walk us through: bugs you found, incidents you ran, systems you hardened, tooling you shipped.\n\nYou write production code. We work primarily in TypeScript/Node.js and Python.\n\nYou know where security boundaries break in multi-tenant systems, and why it's usually authorization.\n\nYou can explain risk to an engineer in engineering terms and get the fix shipped without escalating.\n\nYou can sit across from a bank's security team, take hard questions honestly, and leave them more confident than when you walked in.\n\nSteady during incidents. Honest afterward.\n\nYou'd rather build leverage than become a bottleneck.\n\nHelpful, not required\nSecuring LLM or agentic products in production.\n\nStanding up a security function at a fast-growing company.\n\nWorking inside or selling into regulated financial institutions: SOC 2, GLBA, FFIEC guidance, third-party risk, exam support.\n\nWhat you'll get:\nImpact & Ownership: A unique opportunity to shape the future of banking through AI, owning end-to-end product initiatives.\n\nCollaborative Environment: Work alongside a talented and passionate team that values continuous improvement and knowledge sharing.\n\nCompetitive Compensation: Includes salary, benefits, and potential equity in a fast-growing startup.\n\nProfessional Growth: Access to resources and mentorship to expand your skill set, influence strategy, and accelerate your career.\n\nCulture of Innovation: We encourage risk-taking, learning from failures, and pushing the boundaries of what’s possible in fintech.\n\nAs an early-stage company building at the frontier of AI, we work with high intensity and commitment. While schedules can vary by role/team, many weeks will demand extra focus, flexibility and time particularly during major launches and high impact sprints. We're seeking those who are aligned to and able to commit to that expectation.","description_format":"text","description_chars":3570,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-16T08:23:27Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.754,"p_room":0.75,"age_days":28,"expected_fill_days":38,"reasons":["conf:1","win:late"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/casca-founding-security-engineer","json_url":"https://alion.io/job/casca-founding-security-engineer.json","meta":{"generated_at":"2026-10-15T18:23:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27908,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":173889},"rest":"https://alion.io/mcp/rest/get_company?id=173889"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcasca-founding-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcasca-founding-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcasca-founding-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/casca-founding-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcasca-founding-security-engineer"}]}