> Markdown version of [/jobs/ext/4150940-casca-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/4150940-casca-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Casca - Senior Security Engineer

- **Company:** DE'CIRCLE LLC
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $190,000 - $250,000
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Artificial Intelligence, Amazon Web Services, Cyber Security, Identity and Access Management, Systems Development Life Cycle, TypeScript, Software Vulnerability Management, Google Cloud, Large Language Models, Software Security, Agentic-AI, Virtual Agents, Devsecops
- **Published:** October 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=3979a3fe62e0b6d9

## About the Role

We are looking for a Founding Security Lead with 4-8 years of experience to own and evolve the application security program at a fast-growing AI-native fintech startup. You'll be a "super IC" - someone who thrives doing hands-on security work while naturally growing into technical leadership. This role is ideal for someone with a strong application security background who is passionate about securing AI agents and agentic workflows in a highly regulated banking environment. You'll join an existing security foundation and take it to the next level as the company scales from Series A through its next phase of growth., * 4-8 years of experience as an application security engineer dealing with rapid growth

 * Strong application security background; passion for securing AI agents and agentic workflows
 * Tech stack: TypeScript, JavaScript, AWS, GCP, DevSecOps, Secure SDLC, Threat Modeling, Application Security, IAM, SOC 2, ISO 27001, AI/LLM Security

## Description

* Owning and maturing the application security program - building security tooling, processes, and secure SDLC practices that integrate naturally into how engineers ship code
 * Securing the AI agent execution surface - partnering with engineering to establish robust security architecture for agentic workflows, ensuring data privacy and mitigating AI-specific vulnerabilities
 * Driving automation of security processes - building detection pipelines, automating vulnerability management, and reducing manual security overhead
 * Leading incident response - acting as primary incident commander and turning every event into systemic improvements
 * Supporting compliance and customer trust initiatives - contributing to SOC 2, ISO 27001, and bank-driven security requirements