Casca Founding Security Engineer at Casca owns security for a multi-tenant AI platform serving FDIC-insured banks. Responsibilities include building security tooling, conducting design reviews, managing incidents, and handling bank security audits.
Responsibilities
Develop software detections, libraries, policy-as-code, automation, and CI/CD checks
Conduct design reviews and threat models focusing on auth, tenant isolation, and data handling
Manage AI attack surface including prompt injection and tool-use abuse
Handle security incidents end to end including write-ups and fixes
Translate bank security reviews and audits into engineering work
Qualification
Required
Several years of experience in AppSec with demonstrable incidents and systems hardened
Experience writing production code in TypeScript/Node.js and Python
Knowledge of security boundaries in multi-tenant systems, especially authorization
Ability to communicate risk and fixes effectively to engineers
Ability to engage confidently with bank security teams
Preferred
Securing LLM or agentic products in production
Standing up a security function at a fast-growing company
Experience with regulated financial institutions and compliance frameworks
