Senior Security Engineer
About the role
Senior Security Engineer at Casca driving security for an AI-native banking platform, owning threat modeling, policy-as-code, detections, incident response, and security reviews in a multi-tenant, regulated environment.
Responsibilities
- Software. Detections, libraries, policy-as-code, automation, CI/CD checks — reviewed, tested, and deployed like any other service.
- Design reviews and threat models on what actually matters: auth, tenant isolation, data handling, anything touching borrower PII.
- The AI attack surface. Prompt injection, tool-use abuse, exfiltration paths through agents, and the evals that tell you whether your controls hold.
- Incidents, end to end, including the write-up and the fixes that follow.
- Bank security reviews and audits, turned into engineering work that improves the system rather than paperwork that describes it.
Qualifications
- Several years of experience in AppSec, with specifics you can walk us through: bugs you found, incidents you ran, systems you hardened, tooling you shipped.
- You write production code. We work primarily in TypeScript/Node.js and Python.
- You know where security boundaries break in multi-tenant systems, and why it's usually authorization.
- You can explain risk to an engineer in engineering terms and get the fix shipped without escalating.
- You can sit across from a bank's security team, take hard questions honestly, and leave them more confident than when you walked in.
- Steady during incidents. Honest afterward.
- You'd rather build leverage than become a bottleneck.
Skills
Benefits
- Impact & Ownership: A unique opportunity to shape the future of banking through AI, owning end-to-end product initiatives.
- Collaborative Environment: Work alongside a talented and passionate team that values continuous improvement and knowledge sharing.
- Competitive Compensation: Includes salary, benefits, and potential equity in a fast-growing startup.
- Professional Growth: Access to resources and mentorship to expand your skill set, influence strategy, and accelerate your career.
- Culture of Innovation: We encourage risk-taking, learning from failures, and pushing the boundaries of what’s possible in fintech.
About Casca
Make Banking Magical
Casca is an AI-native platform transforming small business lending by enabling banks and lenders to originate 10x more loans with 90% less manual effort. Our solutions streamline the entire loan process—from customizable application forms and secure applicant portals to AI-powered assistants, automated document collection, KYB checks, and underwriting. We’ve found product market fit and are scaling our team very quickly. Small businesses are the heart of the American economy. Many banks shy away from providing funding because of the manual effort in pursuing those deals. With us, that changes. We unlock affordable, quick bank funding for the 30M+ small businesses in the US who would otherwise be subject to the high interest rates from predatory online lenders. We are a world-class team of banking & AI experts from Stanford, MIT & Y Combinator. We like to win and we know that the only thing between us and the title is our own ability to improve every day.
More open roles at Casca
- Director of Customer Support3mo agoHybrid (San Francisco)
- Head of Security & Compliance3mo agoHybrid (San Francisco) · Operations
- Forward Deployed Engineer3mo agoHybrid (San Francisco) · Engineering
- Technical Recruiter3mo agoHybrid (San Francisco) · Recruiting & HR
- Head of Security & Compliance3mo agoSan Francisco · Engineering