Founding Security Lead

San Francisco, United States
Full-time

About the role

We are looking for a Founding Security Lead with 4-8 years of experience to own and evolve the application security program at a fast-growing AI-native fintech startup. You'll be a "super IC" – someone who thrives doing hands-on security work while naturally growing into technical leadership. This role is ideal for someone with a strong application security background who is passionate about securing AI agents and agentic workflows in a highly regulated banking environment. You'll join an existing security foundation and take it to the next level as the company scales from Series A through its next phase of growth.

What you will be doing

  • Owning and maturing the application security program – building security tooling, processes, and secure SDLC practices that integrate naturally into how engineers ship code
  • Securing the AI agent execution surface – partnering with engineering to establish robust security architecture for agentic workflows, ensuring data privacy and mitigating AI-specific vulnerabilities
  • Driving automation of security processes – building detection pipelines, automating vulnerability management, and reducing manual security overhead
  • Leading incident response – acting as primary incident commander and turning every event into systemic improvements
  • Supporting compliance and customer trust initiatives – contributing to SOC 2, ISO 27001, and bank-driven security requirements as a nice-to-have extension of your core security work

About Casca

Casca is building AGI for banking. We’re replacing decades-old legacy systems with AI-native technology that automates 90% of the manual work humans once had to do.

Casca is built upon responsible, compliant AI practices, including human-in-the-loop monitoring. Experience the future of lending for yourself!

Casca was founded by banking industry and machine learning experts from Stanford University and is backed by industry veterans & top-tier venture capital investors, including: Peterson Ventures, Y Combinator, The Sarah Smith Fund, and Clocktower Technology Ventures.

Required skills

TypeScript
JavaScript
AWS
GCP
DevSecOps
Secure SDLC
Threat Modeling
Application Security
IAM
SOC 2
ISO 27001
AI/LLM Security

Other roles at Casca

Interested?

Let me introduce you to the founders.

Skip the process

Job details

Salary

$190,000 - $250,000

Location

San Francisco, United States

Experience

4+ years

Company

NameCasca
Industryai, fintech, finance, cybersecurity, financial_services, security, b2b
Team Size45

Funding

Total raised

$33M

Last stage

Series A

Investors

Y Combinator
Canapi Ventures
PPeterson Ventures

Founders

Lukas Haffer

Lukas Haffer

LinkedIn

What happens next.

No applications, no recruiter spam. Just the intro.

01

Confirm the fit

A few questions to make sure this role is the right shape for you. Two minutes.

02

I pitch you to the company

I write the intro, send it to the founder, and handle the back-and-forth.

03

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.