{"id":3622487,"url":"https://alion.io/job/cast-ai-security-engineer","title":"Security Engineer","company":{"id":54,"name":"CAST AI","domain":"cast.ai","url":"https://alion.io/company/cast-ai","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":6,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["DE","FR","AT","BE","BG","HR","CY","CZ","DK","FI","HU","IE","IT","NL","PL","RO","ES","SE","EE","GR","LV","LT","LU","MT","PT","SK","SI"],"hiring_countries_total":27,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Akamai","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Hugging Face","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"STRIDE","optional":false},{"name":"Wiz","optional":false},{"name":"ArgoCD","optional":true},{"name":"ClickHouse","optional":true},{"name":"FedRAMP","optional":true},{"name":"GitLab CI","optional":true},{"name":"GitOps","optional":true},{"name":"Grafana","optional":true},{"name":"gRPC","optional":true},{"name":"ISO 27001","optional":true},{"name":"Least Privilege","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Rest API","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true},{"name":"VictoriaMetrics","optional":true}],"status":"live","first_seen_at":"2026-11-02T15:34:18Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-03T18:21:24Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"CAST AI is an automation platform that operates cloud-native and AI infrastructure at scale. By embedding autonomous decision-making directly into Kubernetes and cloud environments, CAST AI continuously optimises performance, reliability and efficiency in production.\nMore than 2,100 companies rely on CAST AI, including Akamai, BMW, Cisco, FICO, Hugging Face, NielsenIQ, Swisscom and TGS. We are headquartered in Miami and operate as a remote-first company across 34 countries in Europe, North America, Latin America and APAC. In January 2026, CAST AI reached unicorn status following a strategic investment from Pacific Alliance Ventures, the corporate venture arm of Shinsegae Group.\nAbout the role\nCAST AI is hiring its first dedicated Security Engineer.\nSecurity is currently handled alongside other responsibilities by engineers across the product organisation. As the company grows, we need someone whose full-time focus is understanding the security of our platform, identifying the highest-impact risks and helping engineering teams address them.\nCAST AI operates inside customers’ production environments. Customers grant the platform cloud credentials, cluster access and permission to delete, move and resize workloads. Every permission needs to be justified, every action needs to be attributable and every component needs to be assessed as part of a wider attack surface.\nYou will work across a multi-tenant platform spanning AWS, GCP and Azure, Kubernetes environments, microservices, CI/CD pipelines and AI agents that make autonomous decisions in production. You will help make the secure path the easiest path for engineering teams.\nThis is a technical, hands-on individual contributor role. You will not be expected to implement every security control yourself, but you will identify risks, define practical mitigations, guide the teams responsible for implementation and drive the most important issues through to closure.\nYou will report to Mantas Norvaiša and work closely with engineering teams, the Platform team and Danielius, who leads the non-technical side of compliance.\nWhat you will do\nLearn CAST AI’s architecture, infrastructure and engineering workflows, then identify security flaws and material risks.\nSet up, operate and continuously tune cloud security tooling such as Wiz so it produces high-signal findings that engineering teams can act on.\nBuild threat models for the product and backend architecture, including trust boundaries, service-to-service authentication, customer-cluster access, secrets and attack paths.\nAssess and prioritise findings using evidence, business impact and exploitability rather than treating every alert equally.\nPresent the most important risks to engineering and company leadership and build the case for addressing them.\nAdvise engineering teams on practical security improvements.\nDrive the implementation of security controls across engineering, including production access, identity, secrets management and secure CI/CD practices.\nWork with the relevant teams to ensure security controls are implemented, tracked and maintained.\nHelp translate compliance requirements into meaningful technical work and evidence.\nContribute to security standards for cloud infrastructure, Kubernetes, software supply chains and AI-enabled systems.\nSupport the development of security signals and incident-response practices while helping reduce alert noise.\nUse scripting, prototypes or code where helpful to validate risks, automate security workflows or support engineering teams. This is not a software development role, but strong software-engineering fundamentals are important.\nWhat you will bring\nAt least 5-6 years of professional security experience. Around 10 years or more would be ideal.\nHands-on experience setting up and running cloud security tooling in production, such as Wiz, Upwind or a similar platform, and turning findings into fixes.\nStrong understanding of cloud infrastructure security across compute, networking, IAM, storage and service communication.\nPractical experience with at least one of AWS, GCP or Azure, with the ability to reason about how cloud systems work and how they can fail.\nStrong understanding of Kubernetes and cloud-native infrastructure.\nExperience threat modelling real systems using STRIDE or a similar method, and the ability to lead engineering teams through the process.\nStrong software-engineering fundamentals, including the ability to understand and reason about software architecture, distributed systems and infrastructure.\nAbility to write or review code and automation in Go or Python.\nStrong written and spoken English.\nA proactive, adaptable approach and comfort working in a fast-moving environment where the security function is being built from the ground up.\nNice to have\nDeep hands-on experience with AWS, GCP or Azure, including compute, networking and storage internals.\nKubernetes security experience covering RBAC, admission control, network policies and Pod Security Standards.\nExperience hardening real production Kubernetes clusters.\nIdentity and secrets-management experience, including least-privilege IAM, workload identity and secrets rotation.\nDetection engineering or incident-response experience, including tuning security signals and reducing false positives.\nExperience with SOC 2, ISO 27001, FedRAMP or similar compliance frameworks.\nSoftware supply-chain security experience, including SBOMs, dependency scanning, container-image scanning, signing and CI/CD security.\nExperience securing AI and agent-based systems, including prompt injection, excessive agency and tool abuse risks.\nFamiliarity with AI coding agents and agentic development workflows.\nExperience with Terraform and infrastructure-as-code security.\nSecurity certification such as OSCP, CISSP or a comparable qualification. We value what you have built and fixed more than certifications alone.\nTechnology environment\nSecurity: Wiz\nCloud and orchestration: Kubernetes, GCP, AWS, Azure\nInfrastructure as code: Terraform\nProgramming: Go, Python\nDatabases and storage: PostgreSQL, ClickHouse, Google Cloud Storage\nMessaging and APIs: GCP Pub/Sub, gRPC, REST\nObservability: Grafana, VictoriaMetrics, VictoriaLogs, VictoriaTraces\n CI/CD and GitOps: GitLab CI, Argo CD, Kargo\nYou do not need experience with every technology listed. We are looking for deep security judgement, strong infrastructure fundamentals and the ability to learn the rest quickly.\nWhat you will get\nA chance to build the first dedicated security function at a fast-growing cloud infrastructure company.\nDirect influence over how security is designed, prioritised and implemented across the organisation.\nExposure to large-scale multi-cloud, Kubernetes and AI infrastructure.\nClose collaboration with engineering and platform teams rather than security work in isolation.\nA flexible, remote-first working environment across Europe.\nEquity options.\nLearning and development budget, including access to relevant courses and conferences.\nEquipment budget and team-building support.\nAdditional time off and company events.\nHiring process\nIntroductory conversation with Mantas Norvaiša.\nSecurity-focused threat modelling exercise. You will be given a system to analyse and model. This is similar to a system-design interview, but focused on trust boundaries, threats, attack paths and mitigations.\nConversation with Danielius about compliance and cross-functional working.\nCulture check interview","description_format":"text","description_chars":7467,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Company events","Equity"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Cyprus","iso":"CY","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Virtualization & Containers","Cloud Cost & Multi-Cloud Management"],"lifecycle":[{"event":"open","at":"2026-11-02T18:52:05Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":49,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/cast-ai-security-engineer","json_url":"https://alion.io/job/cast-ai-security-engineer.json","meta":{"generated_at":"2026-11-03T19:49:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2393,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":54},"rest":"https://alion.io/mcp/rest/get_company?id=54"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcast-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcast-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcast-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cast-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcast-ai-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3622487}},{"tool":"search_jobs","arguments":{"company":"cast.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3622487},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}