CasperStudios AI Security & DevOps Engineer at Casper Studios to own secure production deployment of AI systems. Set and enforce security standards including threat models, CI/CD gates, and client security engagements.
Responsibilities
We're hiring an AI Security & DevOps Engineer to own how Casper takes AI systems from prototype to production securely. This role will set and enforce the technical standard: threat models, secure defaults, authentication and secrets patterns, CI/CD gates, and the agent-specific controls that AI systems need and traditional security programs don't cover. In parallel, this role will own the client security conversation: engaging their security team early, translating their requirements into what we build, and producing the evidence that gets an enterprise deployment approved.
The AI Security & DevOps Engineer will work across every engagement rather than sitting on one. Our clients are largely regulated enterprises on Microsoft stacks, so the work spans identity, cloud, data protection, and the newer surface of agents, tools, and connectors. This position will be the person who knows the difference between a proof of concept and a production system in a bank, scales the rigor accordingly, and decides what ships.
Own Casper's dev-to-production security standard and make it something engineers actually use
Define and run the security gate in our delivery process: threat models, design reviews, and the call on what ships
Harden what we build - identity and authentication, secrets management, data protection, egress controls, and the agent surface: prompt injection, tool and connector permissioning, untrusted input in agent loops, MCP auth
Own the platform work security depends on: CI/CD, automated scanning and review across our repos, infrastructure-as-code, environment and access management, logging and telemetry
Audit our own repos and internal systems, and fix what you find
Lead the client security conversation - engage their security team early, extract requirements, map approved and unapproved vendors, and produce the threat models and evidence packs that clear review the first time
Set our point of view on preferred vendors for auth, secrets, telemetry, and scanning so engagements stop relitigating the same decisions
Feed security into scoping - realistic timelines and a production roadmap that accounts for how long validation takes
Raise the security bar across engineering through review, pairing, and written standards
What You’ll Bring
Qualification
ConsultingAI red teamingYou Might Be A Fit If
Required
Deep hands-on application and product security experience
Experience with threat modeling and vulnerability remediation
Real DevOps and platform experience including CI/CD
Preferred
Regulated-industry exposure - financial services, healthcare, or another environment where security review is genuinely adversarial
Consulting, agency, or forward-deployed background where you earned trust with a client's security org rather than inherited it
Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF, or ISO 42001
SOC 2 or ISO 27001 experience - useful context, not the job
AI red teaming, adversarial testing, or abuse-case analysis
You Might Be A Fit If
You've been a first security hire and built the function from nothing
You're an AppSec or platform engineer who went deep on LLM and agent security and now gets pulled into every AI review