Member of Technical Staff – Security

Runlayer

Security Engineer developing security scanning and detection products to protect enterprise AI. Handling key AppSec responsibilities and extending detection coverage for various agents.

Posted 6/23/2026full-time🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Build and improve Watch products: static and dynamic scanning for MCP servers, skills, plugins, and agent behavior detection on endpoints
Develop shadow detection: identify unregistered MCP servers, skills, plugins, and agents running outside governance across the enterprise
Own AppSec for the platform: penetration testing, vulnerability management, dependency scanning, and security hardening of the control plane
Build automated version scanning: CI/CD-integrated security checks that run on each new MCP server version, skill update, or plugin release
Extend detection coverage to CLI agents (Codex, OpenCode) and browser-based agents

Requirements

What you’ll need

8+ years in security engineering with deep experience in application security, security tooling development, or endpoint detection
Builder, not operator. You've created scanning or detection systems: parsers, rule engines, analysis pipelines.
Experience with shadow IT detection, asset discovery, or endpoint monitoring in enterprise environments
Strong Python skills (our scanning pipeline and platform backend are Python/FastAPI)
Understanding of API and gateway attack patterns: SSRF, token theft, injection, supply-chain attacks
Awareness of emerging AI/LLM security threats: prompt injection, tool poisoning, jailbreaking, indirect prompt injection through tool responses
Bonus Qualifications
Experience with MCP, AI agents, or LLM security specifically
Background in building commercial security products (not just internal tooling)
Network in enterprise security (SVCI, Israeli security community, etc.)

Benefits

Comp & perks

Competitive salary and equity — compensation that reflects your expertise and customer-facing responsibilities.
Paid time off — paid vacation, paid sick leave, and paid parental leave.
Professional development — budget for conferences, courses, and certifications in AI, enterprise software, and customer success.
Top-tier equipment — your choice of laptop and accessories to create your ideal work environment.
Health benefits — comprehensive health, dental, and vision coverage.
Customer interaction opportunities — work directly with innovative companies and see the immediate impact of your work.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security engineeringapplication securitysecurity tooling developmentendpoint detectionPythonFastAPIpenetration testingvulnerability managementdependency scanningshadow IT detection

Soft Skills

builder mindsetproblem-solvinganalytical thinking