Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 39 hours agoWe saw it 67 min after it went up

Security Engineer

Cast AI42 open roles

Where
European Union
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity EngineerCast AI · European Union

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Cast AI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Cast AI postings stay open a median of 23 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 39 hours ago

Cast AI median: 23 days open

The posting

CAST AI is an automation platform that operates cloud-native and AI infrastructure at scale. By embedding autonomous decision-making directly into Kubernetes and cloud environments, CAST AI continuously optimises performance, reliability and efficiency in production.

More than 2,100 companies rely on CAST AI, including Akamai, BMW, Cisco, FICO, Hugging Face, NielsenIQ, Swisscom and TGS. We are headquartered in Miami and operate as a remote-first company across 34 countries in Europe, North America, Latin America and APAC. In January 2026, CAST AI reached unicorn status following a strategic investment from Pacific Alliance Ventures, the corporate venture arm of Shinsegae Group.

About the role

CAST AI is hiring its first dedicated Security Engineer.

Security is currently handled alongside other responsibilities by engineers across the product organisation. As the company grows, we need someone whose full-time focus is understanding the security of our platform, identifying the highest-impact risks and helping engineering teams address them.

CAST AI operates inside customers’ production environments. Customers grant the platform cloud credentials, cluster access and permission to delete, move and resize workloads. Every permission needs to be justified, every action needs to be attributable and every component needs to be assessed as part of a wider attack surface.

You will work across a multi-tenant platform spanning AWS, GCP and Azure, Kubernetes environments, microservices, CI/CD pipelines and AI agents that make autonomous decisions in production. You will help make the secure path the easiest path for engineering teams.

This is a technical, hands-on individual contributor role. You will not be expected to implement every security control yourself, but you will identify risks, define practical mitigations, guide the teams responsible for implementation and drive the most important issues through to closure.

You will report to Mantas Norvaiša and work closely with engineering teams, the Platform team and Danielius, who leads the non-technical side of compliance.

What you will do

  • Learn CAST AI’s architecture, infrastructure and engineering workflows, then identify security flaws and material risks.
  • Set up, operate and continuously tune cloud security tooling such as Wiz so it produces high-signal findings that engineering teams can act on.
  • Build threat models for the product and backend architecture, including trust boundaries, service-to-service authentication, customer-cluster access, secrets and attack paths.
  • Assess and prioritise findings using evidence, business impact and exploitability rather than treating every alert equally.
  • Present the most important risks to engineering and company leadership and build the case for addressing them.
  • Advise engineering teams on practical security improvements.
  • Drive the implementation of security controls across engineering, including production access, identity, secrets management and secure CI/CD practices.
  • Work with the relevant teams to ensure security controls are implemented, tracked and maintained.
  • Help translate compliance requirements into meaningful technical work and evidence.
  • Contribute to security standards for cloud infrastructure, Kubernetes, software supply chains and AI-enabled systems.
  • Support the development of security signals and incident-response practices while helping reduce alert noise.
  • Use scripting, prototypes or code where helpful to validate risks, automate security workflows or support engineering teams. This is not a software development role, but strong software-engineering fundamentals are important.

What you will bring

  • At least 5–6 years of professional security experience. Around 10 years or more would be ideal.
  • Hands-on experience setting up and running cloud security tooling in production, such as Wiz, Upwind or a similar platform, and turning findings into fixes.
  • Strong understanding of cloud infrastructure security across compute, networking, IAM, storage and service communication.
  • Practical experience with at least one of AWS, GCP or Azure, with the ability to reason about how cloud systems work and how they can fail.
  • Strong understanding of Kubernetes and cloud-native infrastructure.
  • Experience threat modelling real systems using STRIDE or a similar method, and the ability to lead engineering teams through the process.
  • Strong software-engineering fundamentals, including the ability to understand and reason about software architecture, distributed systems and infrastructure.
  • Ability to write or review code and automation in Go or Python.
  • Strong written and spoken English.
  • A proactive, adaptable approach and comfort working in a fast-moving environment where the security function is being built from the ground up.

Nice to have

  • Deep hands-on experience with AWS, GCP or Azure, including compute, networking and storage internals.
  • Kubernetes security experience covering RBAC, admission control, network policies and Pod Security Standards.
  • Experience hardening real production Kubernetes clusters.
  • Identity and secrets-management experience, including least-privilege IAM, workload identity and secrets rotation.
  • Detection engineering or incident-response experience, including tuning security signals and reducing false positives.
  • Experience with SOC 2, ISO 27001, FedRAMP or similar compliance frameworks.
  • Software supply-chain security experience, including SBOMs, dependency scanning, container-image scanning, signing and CI/CD security.
  • Experience securing AI and agent-based systems, including prompt injection, excessive agency and tool abuse risks.
  • Familiarity with AI coding agents and agentic development workflows.
  • Experience with Terraform and infrastructure-as-code security.
  • Security certification such as OSCP, CISSP or a comparable qualification. We value what you have built and fixed more than certifications alone.

Technology environment

  • Security: Wiz
  • Cloud and orchestration: Kubernetes, GCP, AWS, Azure
  • Infrastructure as code: Terraform
  • Programming: Go, Python
  • Databases and storage: PostgreSQL, ClickHouse, Google Cloud Storage
  • Messaging and APIs: GCP Pub/Sub, gRPC, REST
  • Observability: Grafana, VictoriaMetrics, VictoriaLogs, VictoriaTraces
  • CI/CD and GitOps: GitLab CI, Argo CD, Kargo

You do not need experience with every technology listed. We are looking for deep security judgement, strong infrastructure fundamentals and the ability to learn the rest quickly.

What you will get

  • A chance to build the first dedicated security function at a fast-growing cloud infrastructure company.
  • Direct influence over how security is designed, prioritised and implemented across the organisation.
  • Exposure to large-scale multi-cloud, Kubernetes and AI infrastructure.
  • Close collaboration with engineering and platform teams rather than security work in isolation.
  • A flexible, remote-first working environment across Europe.
  • Equity options.
  • Learning and development budget, including access to relevant courses and conferences.
  • Equipment budget and team-building support.
  • Additional time off and company events.

Hiring process

  1. Introductory conversation with Mantas Norvaiša.
  2. Security-focused threat modelling exercise. You will be given a system to analyse and model. This is similar to a system-design interview, but focused on trust boundaries, threats, attack paths and mitigations.
  3. Conversation with Danielius about compliance and cross-functional working.
  4. Culture check interview
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Cast AI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Cast AI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Cast AI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.