Security Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Familiarize yourself with CAST AI’s architecture, infrastructure, and engineering workflows to identify security vulnerabilities and significant risks.

• Establish, manage, and continually optimize cloud security tools such as Wiz.

• Develop threat models for the product and backend architecture, addressing trust boundaries, service-to-service authentication, customer-cluster access, secrets, and potential attack vectors.

• Evaluate and prioritize findings based on evidence, business impact, and exploitability.

• Communicate critical risks to engineering and company leadership.

• Provide guidance to engineering teams on practical security enhancements.

• Lead the implementation of security measures across engineering, focusing on production access, identity management, secrets management, and secure CI/CD practices.

• Ensure that security controls are effectively implemented, monitored, and maintained.

• Convert compliance requirements into actionable technical tasks and documentation.

• Contribute to the establishment of security standards for cloud infrastructure, Kubernetes, software supply chains, and AI-enabled systems.

• Assist with security signals and incident-response strategies while minimizing alert noise.

• Utilize scripting, prototypes, or code to validate risks, automate security workflows, or aid engineering teams.

• Report directly to Mantas Norvaiša and collaborate with engineering teams, the Platform team, and compliance leadership.

⛳️ Requirements

• A minimum of 5–6 years of professional security experience; around 10 years or more is preferred.

• Practical experience in setting up and managing cloud security tools in a production environment, such as Wiz, Upwind, or similar platforms, and translating findings into actionable fixes.

• In-depth knowledge of cloud infrastructure security, including compute, networking, IAM, storage, and service communication.

• Hands-on experience with at least one of AWS, GCP, or Azure.

• Strong understanding of Kubernetes and cloud-native infrastructure.

• Experience in threat modeling real systems using STRIDE or similar methodologies.

• Solid software engineering fundamentals, encompassing software architecture, distributed systems, and infrastructure.

• Capability to write or review code and automation in Go or Python.

• Excellent written and verbal communication skills in English.

• A proactive and adaptable mindset, comfortable in a fast-paced environment.

• Preferred: Knowledge of Kubernetes security, production cluster hardening, identity and secrets management, detection engineering, incident response, SOC 2, ISO 27001, FedRAMP, software supply chain security, AI and agent-based systems security, Terraform, and security certifications such as OSCP or CISSP.

🏝️ Benefits

• A flexible, remote-first work culture across Europe.

• Equity options available.

• Budget for learning and development, including access to relevant courses and conferences.

• Equipment budget and support for team-building activities.

• Additional time off and company events.

• Direct impact on how security is designed, prioritized, and implemented throughout the organization.

• Experience with large-scale multi-cloud, Kubernetes, and AI infrastructure.

• Close collaboration with engineering and platform teams.